Which ACE blocks telnet from anyone to the router $192\mathrm{.}168\mathrm{.}10\mathrm{.}1?$

access$-$list $101$ permit tcp any host $192\mathrm{.}168\mathrm{.}10\mathrm{.}1$ eq $23$

access$-$list $101$ deny udp any host $192\mathrm{.}168\mathrm{.}10\mathrm{.}1$ eq $23$

access$-$list $101$ deny tcp any host $192\mathrm{.}168\mathrm{.}10\mathrm{.}1$ eq $23$

access$-$list $101$ deny tcp any $192\mathrm{.}168\mathrm{.}10\mathrm{.}10\mathrm{.}0\mathrm{.}0\mathrm{.}255$ eq $23$