Typical setups probably aren't listening on a public address (or any address for a desktop), so you'd at least need a LAN attacker presumably.