V_RocKs

So I decide to investigate the server in question,

7/tcp open echo
9/tcp open discard
13/tcp open daytime
17/tcp open qotd
19/tcp open chargen
20/tcp open ftp-data
21/tcp open ftp
25/tcp open smtp
80/tcp open http
81/tcp filtered hosts2-ns
135/tcp filtered msrpc
139/tcp filtered netbios-ssn
221/tcp open fln-spx
225/tcp open unknown
280/tcp open http-mgmt
443/tcp open https
445/tcp filtered microsoft-ds
593/tcp filtered http-rpc-epmap
707/tcp filtered unknown
821/tcp open unknown
880/tcp open unknown
943/tcp open unknown
980/tcp open unknown
1021/tcp open unknown
1024/tcp filtered kdm
1025/tcp open NFS-or-IIS
1030/tcp open iad1
1032/tcp open iad3
2105/tcp open eklogin
3128/tcp filtered squid-http
3372/tcp open msdtc
4444/tcp filtered krb524
4899/tcp open radmin

The fucking thing looks like swiss cheese... Owned by some Korean copmany, this server has 20+ instances of httpd running on a variety of ports... How many Koreans does it take to lock down a windows box?