https://labs.ripe.net/author/luuk_hendriks/sshcure-ssh-intrusion-detection-using-netflow-and-ipfix/