Limit the access scope for Prevalent known internal port to only allow access in internal networks and limited scope.

If a public interface exists, remove it and limit the access scope within the VNET only to applications or instances that require access. See https://docs.microsoft.com/en-us/azure/virtual-network/network-security-groups-overview.