sme9admin counts connections at the TCP level...
And if it does that, it is just wasting your time.
If you don't want ssh TCP connections, don't enable it, or keep it private.
If you have ssh enabled, care about authentication failures, not about TCP connections. But the real threat is authentication successes, not failures ....