TOP shows: 28934 www-data 20 0 519m 22m 2396 S 0.3 0.1 0:00.06 apache2 29063 www-data 20 0 519m 22m 2384 S 0.3 0.1 0:00.01 apache2 29108 www-data 20 0 519m 21m 2104 S 0.3 0.1 0:00.01 apache2 29134 www-data 20 0 519m 22m 2156 S 0.3 0.1 0:00.01 apache2 32081 root 20 0 518m 43m 24m S 0.3 0.3 1:32.61 apache2 Could it be cron-jobs?? the apps.vhost?? all my other sites are running as WEB* whatever. I find it strange.
These are apache processes, so this can be any website on your server. These processes are not from scripts, it can be a html or image file or apache calls fcgi and wiats for an answer. Apache itself runs always as www-data user, dont mix up the apache main process with the php processes of a website (which run as web* user) or the ispconfg or ispapps vhost (which run as user ispconfig or ispapps).
