You have Symantec Endpoint Protection (SEP) for Linux clients that are Active Directory (AD) integrated. You expect these clients to show up in their respective imported organizational units (OUs) in Symantec Endpoint Protection Manager (SEPM). However, they show up in the Default group instead.
This is 'by design'. SEP for Linux clients can only be managed using groups that are manually defined in SEPM.