ISpy sends server and mail probes and stores the statistics. (configured through DDM)

 

ISpy (runjava) will run automatically once probes are enabled

To see what enabled probe(s) might be causing ISPY to run automatically, issue the following command at the Domino server console:

sh sched -ddm

The console output will report what probe is enabled and what is using the ISPY task. 

(source: Which Domino server tasks may run automatically when Domino Domain Monitoring (DDM) is enabled

More info: eg in Administrator help  under server tasks and Domain Monitoring