Nobody can change your rcon password without editing your server.cfg.
If you your rcon you have to check the server.cfg on your server files.
Just say you want to bruteforce a rcon password, it's mpgh, we don't judge you
and bruteforcing a Rcon, after 20 failed attempts you get kicked/banned *_*.