FTPとSSHのIP制限を行う場合、TCP Wrapperが簡単です。

# vi /etc/hosts.allow

#
# hosts.allow This file contains access rules which are used to
# allow or deny connections to network services that
# either use the tcp_wrappers library or that have been
# started through a tcp_wrappers-enabled xinetd.
#
# See 'man 5 hosts_options' and 'man 5 hosts_access'
# for information on rule syntax.
# See 'man tcpd' for information on tcp_wrappers
#

ALL : 127.0.0.1
sshd : 222.xxx.yyy.133, 155.aaa.bbb.121
vsftpd : 222.xxx.yyy.133, 155.aaa.bbb.121

# vi /etc/hosts.deny

sshd : all
vsftpd : all