ipset add blacklistip 34.96.130.13
nft add element inet filter blacklistip { 34.96.130.13 }
ufw deny from 34.96.130.13
(ip.src eq "34.96.130.13") then block