A scan has no opinion about which server matters to you. It only sees which version answers.
BigGo Finance reports that North Korea's Lazarus went after 30 South Korean servers through a PHP vulnerability, aiming at government and finance. The Record reports the City of Osaka warned of a breach impacting 1 million, and warned about emails impersonating the city.
If you run inherited software, own two things: what is installed and reachable, and how your users verify that a message is yours. Every undocumented system I have taken over had a reachable service listed nowhere, so inventory comes before patch plans, with migration off versions that no longer get fixes after that. Describe what you inherited and you will get a written estimate with scope and timeline.