You have several options:
-Use a firewall
-In the IIS manager use the "IP address and domain restrictions" option, this allows you to allow/deny ip ranges.
-In the website-code you could get the IP address from the client using Request.UserHostAddress