Flow 1 risky: tcp 10.40.4.2:46045 -> 10.40.3.2:143