@sun @eriner @sapphire so true
there is one that keeps failing because a port is open but it doesn't have a TLS certificate so it's insecure
it's the ACME port for let's encrypt to automatically renew the certificate on the real port
every however often they're up for scans, someone has to open a ticket with the vendor to explain that.