Flow 1 risky: udp 192.168.2.20:49282 -> 104.46.40.49:60642