Use the ICIServer interface RemoveIPAccessRule method to delete an allowed or denied IP mask.
Signature:
HRESULT RemoveIPAccessRule(
[in] BSTR bstrMask,
[in] VARIANT_BOOL bAllow);