Strange traffic to Google Cloud VPS

Solution 1:

Yes, it sounds like hackers trying to scan your application looking for vulnerabilities.

It doesn't mean it's a direct attack. There are many bot and scripts available on the Internet that can scan a range of IPs, domains, and the like. So, your server could just be in that range.

The most important is securing your application. If it's running on a VM, secure your VM by applying hardening techniques and patch management.

There are also additional services that can be used at the ISP border for filtering malicious traffic, like Cloud Armor (on GCP), AWS WAF of even Cloudflare.

Hope that helps