Is it possible for a hacker to gain access into an organisation’s network even if the organisation does not have an external IP address?