1.Press the Win + R shortcut keys to bring up the Run window, type "secpol.msc," and press Enter to open the Local Security Policy.

2.IP Security Policy: Right-click on "Local Computer," and in the menu that appears, click on "Manage IP Filter Lists and Filter Actions."

3，In the "Manage IP Filter Lists and Filter Actions" window, first select the "Manage IP Filter Lists" tab. Then, locate and click on "Add" below. In the pop-up window, choose "Don't use the Add Wizard" and click "Add" again.

4，Source Address: Specify a specific IP address or subnet. Enter the IP address or subnet of your legitimate paid machine.
Destination Address: Choose "My IP address."
Click "OK" to confirm.

5，Continuing from there, in the returned "Manage IP Filter Lists and Filter Actions" window:
Select "Manage Filter Actions."
Uncheck the "Add Wizard" checkbox.
Click "Add" again.

6，In the new Filter Action Properties window:
Check the "Block" option at the top.
Click "OK" in sequence to confirm and return.

7，IP Security Policies:
Right-click again on "Local Computer."
In the pop-up menu, click on "Create IP Security Policy."

8，In the popped-up window:
Click "Next."
Fill in the Name and Description as desired.
Click "Next."
Leave the "Activate the default response rule" option unchecked.
Click "Next" again and then click "Finish."

9，In the popped-up properties window for the newly created IP Security Policy:
Below, uncheck "Use Add Wizard."
Click "Add."
In the IP Filter List section, check the newly created IP filter list.
In the Filter Action section, check the newly created filter action.
For Connection Type, choose "Local Area Network (LAN)."
Click "OK" in sequence to confirm and return.




10，In the IP Security Policies:
In the right-hand window of "Local Computer," locate the newly created IP Security Policy.
Right-click on it.
In the pop-up menu, click on "Assign."。