Blocking IP ranges

I’m having a rough time with support trying to get this to work. I have a site that I’m trying to block IP ranges from hitting because they just keep submitting bogus orders through the shopping cart. The site is hosted on a windows server, so the htaccess file doesn’t work. I then found an old thread that pointed to using the Website Access Control via the control panel. I used that and put in a few ranges as a test, including my own IP range. Tried it with “deny all” and “allow all”, and neither way works to block anything. Has anyone had any luck at all with blocking ranges instead of just individual IP’s on servers here?

Thanks!

the web.config file can block IP ranges.

IP Security <ipSecurity> | Microsoft Learn

Thank you, that seems to work for a small number of IP ranges.. But if I get a generated list from say Block Visitors by Country | IP2Location it seems to choke and stop serving all together.. Any ideas?

That’s because doing such ranges is not recommended anywhere. Even on a huge hardware firewall doing so many IPs is killer.