ipset add blacklistip 27.123.223.134
nft add element inet filter blacklistip { 27.123.223.134 }
ufw deny from 27.123.223.134
(ip.src eq "27.123.223.134") then block