Turning off the wrong-server is a thing that bit me before I installed molly-guard. These days that, and similar, is a tweak I apply to all hosts I control.
(molly-guard makes you type in the hostname before a halt/shutdown/reboot command.)
Steve Kemp? Slightly unrelated, but i just want to say i'm (still) a big fan of your old 2004 program window.exe. Very handy for unhiding the odd broken program.
Have a wonderful day! (and i'll definitely look at installing molly-guard on my production debian servers)
(molly-guard makes you type in the hostname before a halt/shutdown/reboot command.)