Data my friend, data. Ports scanning? Well, tell us about the hosts and the port numbers. Add some logs if you got.

If you did not go into the details, chances are that when you will, this will turned out to be a false positive case.

If you did, where are the evidence?