An IP allowlist is present at the edge but admin traffic still leaks through

The team secures the public hostname and later discovers an alternate internal or legacy hostname still exposes the same admin interface.