Secure Instance

[HendrawanP]

Suspicious Activity observed in my instance is there any way I can do to protect it

[VishalBulbule]

You can enable Audit and data access log and verify logs about activity.  

[Andrew_Tyt]

HI,

It really depends on what is your instant doing. 

First of all close all unneeded access from the internet, use FW, and stop unneeded services in the VM. If your instance does not need access from the internet you can remove public IP from the VM and create NAT GW for access from the instance to the Internet. I this way you can access to VM SSH over VPN or IAP + gcloud ssh

Best regards

Andrew