ipset add blacklistip 200.123.132.13
nft add element inet filter blacklistip { 200.123.132.13 }
ufw deny from 200.123.132.13
(ip.src eq "200.123.132.13") then block