How to block all hosts entering through SSH over TCP

Add a line in file
# /etc/hosts.deny
sshd: ALL

OR give IP rather than ALL

OR to allow

edit file /etc/hosts.allow and add line
sshd: ip1, ip2