[nOzE]

If he hacked your website/mysql-server with you hlx hosted he has your rcon password! At least they have to be "on" the server do do it. In my case it should be impossible he got the rcon password. So banning solved the problem!