This particular machine doesn't have ssh/xinetd or the like routed from
outside the local LAN.

Unless someone made a mistake with the config somewhere. Run tcpdump to be sure.