GCP Kubernetes: Ingress and external load balancer with IAP lots of open ports scanning nmap

Question

I have a k8s cluster running a Service behind an Ingress with an external HTTPS load balancer and I have Identity-aware proxy protecting my system. The ingress has a public