A collection of IP addresses that should not be allowed to initiate or receive connections to/from a secure network.