title: How do you trace unexpected GCP API calls?
body: <p>In the GCP API Manager I'm seeing multiple requests come in for the Google Compute Engine API. When I try to filter these requests by credential, it seems that the requests aren't tied to any specific one.</p>
  
  <p><a href="https://i.stack.imgur.com/tElna.png" rel="nofollow noreferrer"><img src="https://i.stack.imgur.com/tElna.png" alt="enter image description here"></a></p>
  
  <p>I tried disabling the API but all that caused was for the requests to 403 as can be seen in the later API calls. Is there a way to trace the source of these requests?</p>
  
  <p>Are they coming from some integration? From GCP itself?</p>
  
  <p>Here's an expanded view when trying to slice the graph by credential for the same time period:</p>
  
  <p><a href="https://i.stack.imgur.com/ktQor.png" rel="nofollow noreferrer"><img src="https://i.stack.imgur.com/ktQor.png" alt="enter image description here"></a></p>