[Scenario]

There's a file called rcon.exe which comes with each SA:MP client download. It's used to gain RCON access to a server w/o being in it. That's how the person is attempting to connect to your RCON.

Generally banning the IP would do the trick!