I set up an instance 10 days ago with an installation of Centos to use as a backup system. I followed this tutorial:
Looking at the billing I see this: Compute Engine Network Internet Egress from Americas to China 79.08 Mebibyte
http and https are blocked. SSH random 12 character password. Nothing in the instances logs since the day I set it up.
Could that amount of data come from people probing the ports or has the server likely been breached?