Application Security - block specific IPs i.e. static blacklist

I'm trying to create a static blacklist of IP addresses (individual and by network) that can be applied at the policy level regardless of attack signature, url, etc. smart feature. I would prefer to have this as an entry within the application security module rather than an iRule against the VIPs. Of course the path Security ›› Application Security : IP Addresses : IP Address Exceptions allows for exceptions so one may whitelist IPs but I need the inverse functionality of a static blacklist.