In IIS Manager, (if the sub-feature has been installed) there is a node for
IP Address and Domain Restrictions which will allow you to determine which IP addresses you want to allow and/or deny either for a specific website or for all websites on the server.
If you don't see this node, it is because the sub-feature has not been installed. In that case, from the Server Manager Dashboard window choose
Add Roles and Features and navigate to the
Server Roles node, and then to the
Web Server role. Under the
Web Server role node there is a
Security sub-node, and from there, check the box for the
IP and Domain Restrictions item and save. You should now be able to create IP allow and deny rules in IIS Manager for your website or the server.