The Attack surface can be reduced in several ways. You can disable any listening ports that are not being used and enable your firewall. Moreover, you can use port-forwarding and NATing to distribute your public IP address onto the private IP addresses, reducing the total number of IPs being used.