We have found that {GcpVmInstance} is publicly accessible and has port 20 (FTP Connection) open. Access to this port could result in unauthorized access to the VM instance.
Recommended Mitigation
Make sure that public access through port 20 (FTP Connection) is restricted.