If CF was PHP-based, you could use mod_choke, which is designed specifically for this purpose.

http://os.cyberheatinc.com/mod_choke.php

but since I think you guys are stuck on a crappy Micro$oft ASP platform this won't work. I believe there's something somewhat similar in Apache settings, but no clue about IIS.