ipset add blacklistip 1.85.216.107
nft add element inet filter blacklistip { 1.85.216.107 }
ufw deny from 1.85.216.107
(ip.src eq "1.85.216.107") then block