I do a uptime command and found that my server has 2 logged in user. Then i do a who command and found bin to be the user.

Then i tried doing a ps aux, it shows
3495 ? S 0:00 login -- bin

What do you suggest and how this happens?