Flow 2 risky: tcp 192.168.1.138:35726 -> 192.168.1.204:8080