[watwut]

The issue was "intentionally setup for testing purposes".

[cratermoon]

What testing purposes? How long was it up? Without knowing more, that doesn't eliminate it as a problem. There are plenty of cases where something set up "just for testing" ended up being the entry point for attackers.