Flow 1 risky: tcp 192.168.0.1:39236 -> 192.168.0.20:31337