Constant High CPU Loads

This week we started getting more than unusual high cpu loads on our server.

16 Core
32GB Ram

The main issue is Webmail/Roundcube slow loading times.

Heres what i changed on config:

Service Manager - PHP-FPM service for cPanel Daemons Disabled

Process Memory Limit for Mail (MB) > 2048 > 4096
Process Memory Limit for Authentication (MB) 512 > 1024
Size of Authentication Cache (MB) 2 > 4
Process Memory Limit: config (MB) 4096 > 8192

Also cphulk error logs:

Use of uninitialized value $result in index at /usr/local/cpanel/Cpanel/Hulk.pm line 142, <GEN75437> line 10.
[2026-04-09 11:30:52 -0300] warn [cPhulkd] Timed out (2 seconds) while reading from socket.

Use of uninitialized value $result in index at /usr/local/cpanel/Cpanel/Hulk.pm line 142, <GEN75447> line 6.
[2026-04-09 11:30:52 -0300] warn [cPhulkd] Timed out (2 seconds) while reading from socket.

Use of uninitialized value $result in index at /usr/local/cpanel/Cpanel/Hulk.pm line 142, <GEN75448> line 8.
[2026-04-09 11:30:52 -0300] warn [cPhulkd] Timed out (2 seconds) while reading from socket.

Use of uninitialized value $result in index at /usr/local/cpanel/Cpanel/Hulk.pm line 142.
[2026-04-09 11:30:52 -0300] info [cPhulkd] The system encountered an error while processing a request: Broken pipe
[2026-04-09 11:30:52 -0300] info [cPhulkd] The system encountered an error while processing a request: Broken pipe
[2026-04-09 11:30:52 -0300] info [cPhulkd] The system encountered an error while processing a request: Broken pipe
Cpanel::Exception::Netlink/(XID eakdvy) A [asis,Netlink] error occurred: No such file or directory
at /usr/local/cpanel/Cpanel/Linux/Netlink.pm line 184, <GEN75368> line 16.
Cpanel::Linux::Netlink::netlink_transaction("message", HASH(0xc043618), "sock", GLOB(0xd8b2168), "send_pack_obj", Cpanel::Pack=HASH(0xd844d90), "recv_pack_obj", Cpanel::Pack=HASH(0xd847108), ...) called at /usr/local/cpanel/Cpanel/Linux/Netlink.pm line 333
Cpanel::Linux::Netlink::connection_lookup("127.0.0.1", 45128, "127.0.0.1", 143) called at /usr/local/cpanel/Cpanel/Ident.pm line 38
eval {...} called at /usr/local/cpanel/Cpanel/Ident.pm line 37
Cpanel::Ident::identify_local_connection("127.0.0.1", 45128, "127.0.0.1", 143) called at /usr/local/cpanel/Cpanel/Hulkd/Processor.pm line 432
Cpanel::Hulkd::Processor::_handle_input(Cpanel::Hulkd::Processor=HASH(0xc212b18), HASH(0xd8b2138)) called at /usr/local/cpanel/Cpanel/Hulkd/Processor.pm line 403
Cpanel::Hulkd::Processor::_handle_action(Cpanel::Hulkd::Processor=HASH(0xc212b18), __CPANEL_HIDDEN__..., HASH(0xd896078)) called at /usr/local/cpanel/Cpanel/Hulkd/Processor.pm line 160
Cpanel::Hulkd::Processor::__ANON__() called at /usr/local/cpanel/3rdparty/perl/542/cpanel-lib/Try/Tiny.pm line 100
eval {...} called at /usr/local/cpanel/3rdparty/perl/542/cpanel-lib/Try/Tiny.pm line 91
Try::Tiny::try(CODE(0xc2047a0), Try::Tiny::Catch=REF(0xc082db0)) called at /usr/local/cpanel/Cpanel/Hulkd/Processor.pm line 186
Cpanel::Hulkd::Processor::_run_http(Cpanel::Hulkd::Processor=HASH(0xc212b18)) called at /usr/local/cpanel/Cpanel/Hulkd/Processor.pm line 272
Cpanel::Hulkd::Processor::__ANON__() called at /usr/local/cpanel/3rdparty/perl/542/cpanel-lib/Try/Tiny.pm line 100
eval {...} called at /usr/local/cpanel/3rdparty/perl/542/cpanel-lib/Try/Tiny.pm line 91
Try::Tiny::try(CODE(0xc212bd8), Try::Tiny::Catch=REF(0xbd69610)) called at /usr/local/cpanel/Cpanel/Hulkd/Processor.pm line 285
Cpanel::Hulkd::Processor::run(Cpanel::Hulkd::Processor=HASH(0xc212b18), undef) called at /usr/local/cpanel/Cpanel/Hulkd.pm line 433
Cpanel::Hulkd::__ANON__() called at /usr/local/cpanel/3rdparty/perl/542/cpanel-lib/Try/Tiny.pm line 100
eval {...} called at /usr/local/cpanel/3rdparty/perl/542/cpanel-lib/Try/Tiny.pm line 91
Try::Tiny::try(CODE(0xc0ea3b0), Try::Tiny::Catch=REF(0x8c16d8)) called at /usr/local/cpanel/Cpanel/Hulkd.pm line 437
Cpanel::Hulkd::handle_one_connection(Cpanel::Hulkd=HASH(0x909cf0), Cpanel::Socket::INET=GLOB(0xc0830f8), undef) called at /usr/local/cpanel/Cpanel/Hulkd.pm line 605
Cpanel::Hulkd::_handle_accepted_socket_and_reset_idleloops(Cpanel::Hulkd=HASH(0x909cf0), Cpanel::Socket::INET=GLOB(0xc0830f8)) called at /usr/local/cpanel/Cpanel/Hulkd.pm line 347
Cpanel::Hulkd::main_loop(Cpanel::Hulkd=HASH(0x909cf0), Cpanel::Socket::UNIX=GLOB(0xbd69e20), Cpanel::Socket::INET=GLOB(0xbd6a120)) called at /usr/local/cpanel/Cpanel/Hulkd.pm line 249
Cpanel::Hulkd::processor_run(Cpanel::Hulkd=HASH(0x909cf0)) called at /usr/local/cpanel/Cpanel/Hulkd.pm line 162
Cpanel::Hulkd::__ANON__(__CPANEL_HIDDEN__) called at /usr/local/cpanel/Cpanel/Hulkd.pm line 173
Cpanel::Hulkd::launcher(Cpanel::Hulkd=HASH(0x909cf0), 0) called at /usr/local/cpanel/Cpanel/Hulkd.pm line 142
Cpanel::Hulkd::start_daemon(Cpanel::Hulkd=HASH(0x909cf0), 0) called at /usr/local/cpanel/Cpanel/Hulkd.pm line 96
Cpanel::Hulkd::run_daemon(Cpanel::Hulkd=HASH(0x909cf0)) called at libexec/cphulkd.pl line 32
[2026-04-09 11:30:54 -0300] info [cPhulkd] The system encountered an error while processing a request: Broken pipe
[2026-04-09 11:30:54 -0300] info [cPhulkd] The system encountered an error while processing a request: Broken pipe
[2026-04-09 11:30:54 -0300] info [cPhulkd] The system encountered an error while processing a request: Broken pipe
[2026-04-09 11:30:54 -0300] info [cPhulkd] The system encountered an error while processing a request: Broken pipe
[2026-04-09 11:30:54 -0300] info [cPhulkd] The system encountered an error while processing a request: Broken pipe
[2026-04-09 11:30:55 -0300] info [cPhulkd] The system encountered an error while processing a request: Broken pipe
[2026-04-09 11:30:55 -0300] info [cPhulkd] The system encountered an error while processing a request: Broken pipe
[2026-04-09 11:30:55 -0300] info [cPhulkd] The system encountered an error while processing a request: Broken pipe
Cpanel::Exception::Netlink/(XID ybc6bk) A [asis,Netlink] error occurred: No such file or directory
at /usr/local/cpanel/Cpanel/Linux/Netlink.pm line 184, <GEN75361> line 26.
Cpanel::Linux::Netlink::netlink_transaction("message", HASH(0xc3b1e20), "sock", GLOB(0xc230388), "send_pack_obj", Cpanel::Pack=HASH(0xc221230), "recv_pack_obj", Cpanel::Pack=HASH(0xc227210), ...) called at /usr/local/cpanel/Cpanel/Linux/Netlink.pm line 333
Cpanel::Linux::Netlink::connection_lookup("127.0.0.1", 40734, "127.0.0.1", 143) called at /usr/local/cpanel/Cpanel/Ident.pm line 38
eval {...} called at /usr/local/cpanel/Cpanel/Ident.pm line 37
Cpanel::Ident::identify_local_connection("127.0.0.1", 40734, "127.0.0.1", 143) called at /usr/local/cpanel/Cpanel/Hulkd/Processor.pm line 432
Cpanel::Hulkd::Processor::_handle_input(Cpanel::Hulkd::Processor=HASH(0xc212b18), HASH(0xc3b2480)) called at /usr/local/cpanel/Cpanel/Hulkd/Processor.pm line 403
Cpanel::Hulkd::Processor::_handle_action(Cpanel::Hulkd::Processor=HASH(0xc212b18), __CPANEL_HIDDEN__..., HASH(0xc3b1bb0)) called at /usr/local/cpanel/Cpanel/Hulkd/Processor.pm line 160
Cpanel::Hulkd::Processor::__ANON__() called at /usr/local/cpanel/3rdparty/perl/542/cpanel-lib/Try/Tiny.pm line 100
eval {...} called at /usr/local/cpanel/3rdparty/perl/542/cpanel-lib/Try/Tiny.pm line 91
Try::Tiny::try(CODE(0xc2047a0), Try::Tiny::Catch=REF(0xc082db0)) called at /usr/local/cpanel/Cpanel/Hulkd/Processor.pm line 186
Cpanel::Hulkd::Processor::_run_http(Cpanel::Hulkd::Processor=HASH(0xc212b18)) called at /usr/local/cpanel/Cpanel/Hulkd/Processor.pm line 272
Cpanel::Hulkd::Processor::__ANON__() called at /usr/local/cpanel/3rdparty/perl/542/cpanel-lib/Try/Tiny.pm line 100
eval {...} called at /usr/local/cpanel/3rdparty/perl/542/cpanel-lib/Try/Tiny.pm line 91
Try::Tiny::try(CODE(0xc212bd8), Try::Tiny::Catch=REF(0xbd69610)) called at /usr/local/cpanel/Cpanel/Hulkd/Processor.pm line 285
Cpanel::Hulkd::Processor::run(Cpanel::Hulkd::Processor=HASH(0xc212b18), undef) called at /usr/local/cpanel/Cpanel/Hulkd.pm line 433
Cpanel::Hulkd::__ANON__() called at /usr/local/cpanel/3rdparty/perl/542/cpanel-lib/Try/Tiny.pm line 100
eval {...} called at /usr/local/cpanel/3rdparty/perl/542/cpanel-lib/Try/Tiny.pm line 91
Try::Tiny::try(CODE(0xc212a58), Try::Tiny::Catch=REF(0x8c16d8)) called at /usr/local/cpanel/Cpanel/Hulkd.pm line 437
Cpanel::Hulkd::handle_one_connection(Cpanel::Hulkd=HASH(0x909cf0), Cpanel::Socket::INET=GLOB(0xc212830), undef) called at /usr/local/cpanel/Cpanel/Hulkd.pm line 605
Cpanel::Hulkd::_handle_accepted_socket_and_reset_idleloops(Cpanel::Hulkd=HASH(0x909cf0), Cpanel::Socket::INET=GLOB(0xc212830)) called at /usr/local/cpanel/Cpanel/Hulkd.pm line 347
Cpanel::Hulkd::main_loop(Cpanel::Hulkd=HASH(0x909cf0), Cpanel::Socket::UNIX=GLOB(0xbd69e20), Cpanel::Socket::INET=GLOB(0xbd6a120)) called at /usr/local/cpanel/Cpanel/Hulkd.pm line 249
Cpanel::Hulkd::processor_run(Cpanel::Hulkd=HASH(0x909cf0)) called at /usr/local/cpanel/Cpanel/Hulkd.pm line 162
Cpanel::Hulkd::__ANON__(__CPANEL_HIDDEN__) called at /usr/local/cpanel/Cpanel/Hulkd.pm line 173
Cpanel::Hulkd::launcher(Cpanel::Hulkd=HASH(0x909cf0), 0) called at /usr/local/cpanel/Cpanel/Hulkd.pm line 142
Cpanel::Hulkd::start_daemon(Cpanel::Hulkd=HASH(0x909cf0), 0) called at /usr/local/cpanel/Cpanel/Hulkd.pm line 96
Cpanel::Hulkd::run_daemon(Cpanel::Hulkd=HASH(0x909cf0)) called at libexec/cphulkd.pl line 32
Cpanel::Exception::Netlink/(XID 7tb9tk) A [asis,Netlink] error occurred: No such file or directory
at /usr/local/cpanel/Cpanel/Linux/Netlink.pm line 184, <GEN75353> line 36.
Cpanel::Linux::Netlink::netlink_transaction("message", HASH(0xc3951d8), "sock", GLOB(0xc390cd0), "send_pack_obj", Cpanel::Pack=HASH(0xc221ba0), "recv_pack_obj", Cpanel::Pack=HASH(0xc227d20), ...) called at /usr/local/cpanel/Cpanel/Linux/Netlink.pm line 333
Cpanel::Linux::Netlink::connection_lookup("127.0.0.1", 40878, "127.0.0.1", 143) called at /usr/local/cpanel/Cpanel/Ident.pm line 38
eval {...} called at /usr/local/cpanel/Cpanel/Ident.pm line 37
Cpanel::Ident::identify_local_connection("127.0.0.1", 40878, "127.0.0.1", 143) called at /usr/local/cpanel/Cpanel/Hulkd/Processor.pm line 432
Cpanel::Hulkd::Processor::_handle_input(Cpanel::Hulkd::Processor=HASH(0xc212b18), HASH(0xc395118)) called at /usr/local/cpanel/Cpanel/Hulkd/Processor.pm line 403
Cpanel::Hulkd::Processor::_handle_action(Cpanel::Hulkd::Processor=HASH(0xc212b18), __CPANEL_HIDDEN__..., HASH(0xc390b50)) called at /usr/local/cpanel/Cpanel/Hulkd/Processor.pm line 160
Cpanel::Hulkd::Processor::__ANON__() called at /usr/local/cpanel/3rdparty/perl/542/cpanel-lib/Try/Tiny.pm line 100
eval {...} called at /usr/local/cpanel/3rdparty/perl/542/cpanel-lib/Try/Tiny.pm line 91
Try::Tiny::try(CODE(0xc2047a0), Try::Tiny::Catch=REF(0xc082db0)) called at /usr/local/cpanel/Cpanel/Hulkd/Processor.pm line 186
Cpanel::Hulkd::Processor::_run_http(Cpanel::Hulkd::Processor=HASH(0xc212b18)) called at /usr/local/cpanel/Cpanel/Hulkd/Processor.pm line 272
Cpanel::Hulkd::Processor::__ANON__() called at /usr/local/cpanel/3rdparty/perl/542/cpanel-lib/Try/Tiny.pm line 100
eval {...} called at /usr/local/cpanel/3rdparty/perl/542/cpanel-lib/Try/Tiny.pm line 91
Try::Tiny::try(CODE(0xc212bd8), Try::Tiny::Catch=REF(0xbd69610)) called at /usr/local/cpanel/Cpanel/Hulkd/Processor.pm line 285
Cpanel::Hulkd::Processor::run(Cpanel::Hulkd::Processor=HASH(0xc212b18), undef) called at /usr/local/cpanel/Cpanel/Hulkd.pm line 433
Cpanel::Hulkd::__ANON__() called at /usr/local/cpanel/3rdparty/perl/542/cpanel-lib/Try/Tiny.pm line 100
eval {...} called at /usr/local/cpanel/3rdparty/perl/542/cpanel-lib/Try/Tiny.pm line 91
Try::Tiny::try(CODE(0xc083938), Try::Tiny::Catch=REF(0x8c16d8)) called at /usr/local/cpanel/Cpanel/Hulkd.pm line 437
Cpanel::Hulkd::handle_one_connection(Cpanel::Hulkd=HASH(0x909cf0), Cpanel::Socket::INET=GLOB(0xc0ea3b0), undef) called at /usr/local/cpanel/Cpanel/Hulkd.pm line 605
Cpanel::Hulkd::_handle_accepted_socket_and_reset_idleloops(Cpanel::Hulkd=HASH(0x909cf0), Cpanel::Socket::INET=GLOB(0xc0ea3b0)) called at /usr/local/cpanel/Cpanel/Hulkd.pm line 347
Cpanel::Hulkd::main_loop(Cpanel::Hulkd=HASH(0x909cf0), Cpanel::Socket::UNIX=GLOB(0xbd69e20), Cpanel::Socket::INET=GLOB(0xbd6a120)) called at /usr/local/cpanel/Cpanel/Hulkd.pm line 249
Cpanel::Hulkd::processor_run(Cpanel::Hulkd=HASH(0x909cf0)) called at /usr/local/cpanel/Cpanel/Hulkd.pm line 162
Cpanel::Hulkd::__ANON__(__CPANEL_HIDDEN__) called at /usr/local/cpanel/Cpanel/Hulkd.pm line 173
Cpanel::Hulkd::launcher(Cpanel::Hulkd=HASH(0x909cf0), 0) called at /usr/local/cpanel/Cpanel/Hulkd.pm line 142
Cpanel::Hulkd::start_daemon(Cpanel::Hulkd=HASH(0x909cf0), 0) called at /usr/local/cpanel/Cpanel/Hulkd.pm line 96
Cpanel::Hulkd::run_daemon(Cpanel::Hulkd=HASH(0x909cf0)) called at libexec/cphulkd.pl line 32

cPRex Jurassic Moderator

April 10, 2026 13:19

Hey there! While they may be increased load from how the server typically runs, a load of 3-5 isn't really much for a 16-core system.

It looks like two things may be happening, which could potentially be related - cPHulk is being asked to block too many things too quickly due to an attack, and the partial "bah" username from your screenshot is getting too much traffic.

I would investigate why the server is getting so much traffic to begin with and see if that site is indeed under attack, and that may resolve both issues. Here are some resources that may help with this:

https://support.cpanel.net/hc/en-us/articles/360052130134-How-can-I-tell-if-Apache-is-experiencing-a-DDoS-attack

https://support.cpanel.net/hc/en-us/articles/360051121953-What-should-I-do-if-my-server-is-experiencing-DDoS

Constant High CPU Loads

Comments

Didn't find what you were looking for?