This is an automated archive made by the Lemmit Bot.

The original was posted on /r/sysadmin by /u/junk_in_thetrunk on 2023-10-05 23:10:56.

Just got a letter from the cyber insurance company letting us know that we have a public facing server that has RDP enabled on it. They listed why it was an issue, etc, etc. They gave us the DNS name and the IP address.

The DNS name is of a server that we used for testing. It was online for a few weeks and only on during testing. That server no longer exists. It was a cloud server and we no longer own that IP. However we forgot to remove it from our DNS. So I don’t know who’s server they scanned but it wasn’t our. Is this an issue?

Bonus question: Has it ever happened that an insurance company scanned a server that they thought belonged to a client but turned out to be something like the federal government server?

Who would get in trouble? The client for having a “mistake” in their DNS records? Or the insurance company for scanning random (potentially government) servers that don’t belong to them?

TIA