ipset add blacklistip 213.74.23.242
nft add element inet filter blacklistip { 213.74.23.242 }
ufw deny from 213.74.23.242
(ip.src eq "213.74.23.242") then block