this sounds like RCON is enabled with an RCON client holding open the connection, which is BAD. A lot of the RCON tools out there do this, so much so, I had to write my own RCON client to open the connection, pass the cmd’s, then close the connection to RCON gracefully.