How to read the result
An open port is not automatically a problem: a web server needs 80 and 443 open to work. What matters is that only the services that should be exposed actually are.
Admin or database ports (SSH, RDP, MySQL, PostgreSQL, Redis) open to the whole internet usually deserve priority attention.
A careful scan
This check is low-intensity: it does not try passwords, does not exploit services, and blocks private or reserved IPs to prevent unauthorized internal scanning.