Flow 1 risky: udp 192.168.1.2:35990 -> 24.224.190.149:39262