[Sew_Sumi]

I'd be more looking at the script, and any filterscripts you are running.

I doubt you've been hacked, simply compromised by running a script that has a backdoor, or with a terrible choice for RCON password as above mentioned.