(1) Ports are open that should not be. (2) Close all ports that are not vital and get a firewall that will cloak these ports.