More likely it was meant to be an internal service, or at least accessible only from a certain IP range, and someone ballsed up the config.