How do I know if admin didn't gave rcon password to hacker?
Really, if you still need to rely on RCON then your system is seriously flawed. Even the owner shouldn't be using it. Disable it all together and kick anyone who tries to login, whether they're an admin or not.