ipset add blacklistip 94.143.241.21
nft add element inet filter blacklistip { 94.143.241.21 }
ufw deny from 94.143.241.21
(ip.src eq "94.143.241.21") then block