Log analysis - External NATed IP
While performing the investigation on the meta tags, I came across an interesting logs. The log was from an external IP address to an internal IP address which is NATed with a public IP.
As per the log a connection is build to the port 1433 from the external IP address. Does this mean that a successful DB connection is established and is a serious threat to the Database. Can any one advise on this?
- Community Thread
- Forum Thread
- RSA NetWitness
- RSA NetWitness Platform