When suspicious network activity is detected, a Security notification is generated:

Drilling down on the critical security status leads to a more detailed description of the notification, showing that port scanning has been detected:

The host has been observed connecting to 372 hosts using port TCP:445 and 247 hosts using port TCP:139

Clicking on the link for provides additional information about the host.