Take a look here this might help:
http://www.webmasterforums.com/showthread.php?t=1904
Just remember SSH does not make the machine secure even when allow/deny by hosts. To protect the host you should have your network firewalled and allow specific trusted hosts in. If your allowing all ports in but choosing hosts by application, your host is threatened by more then just SSH attacks.