ipset add blacklistip 156.214.79.228
nft add element inet filter blacklistip { 156.214.79.228 }
ufw deny from 156.214.79.228
(ip.src eq "156.214.79.228") then block