ipset add blacklistip 88.20.219.188
nft add element inet filter blacklistip { 88.20.219.188 }
ufw deny from 88.20.219.188
(ip.src eq "88.20.219.188") then block