Use the ICIServer interface GetDeniedMasks method to retrieve a list of all prohibited IP masks for the server.
Signature:
HRESULT GetDeniedMasks([out, retval] VARIANT *aMasks);