Man, thanks for kicking my ass...
Of course it was HlstatsX CE sending requests using a wrong rcon!
Sometimes you donīt see the wood for the trees, if sitting to long to close in front of your monitor..
Thank you mates! (and I will update Sourcebans asap)