Hi Harshit, That does not look typical of NiFi, what it looks like to me is a cryptominer. Is this NiFi connected to the Internet without authentication or with a weak password? Publicly accessible NiFi servers will quickly be exploited to run ExecuteProcess and deploy a miner.
The fact that the name doesn’t seem to match anything related to NiFi and that the CPU usage is high indicate this may be a malicious process. If you kill it there will usually be some sort of persistence mechanism that will restart it. If you check and confirm it’s an unwanted process I would strongly advise deleting this NiFi instance and redeploying. Kind regards, Jim > On 27 Feb 2023, at 05:26, harshit.varsh...@iktara.ai wrote: > > > > > From: harshit.varsh...@iktara.ai [mailto:harshit.varsh...@iktara.ai] > Sent: Monday, February 27, 2023 10:53 AM > To: 'users@nifi.apache.org'; 'u...@nifi.apache.org' > Subject: High Cpu Utilisation in Nifi > > Dear Team, > I am currently facing some issues in using Nifi latest Docker image as it > that is on docker hub using command Docker pull apache/nifi.The problem I am > facing is After 3 days Nifi starts a process That is “MyssqlTcp” that is > taking over 500% Cpu utilization when running Htop in server and it is > related to nifi how to resolve it any suggestions. > Here is the screenshot of the process > > Thanks & Regards > Harshit Varshney > <Screenshot (54).png>
