It sounds like multiple things were misconfigured on these servers and they still have access?!?