ipset add blacklistip 171.36.7.8
nft add element inet filter blacklistip { 171.36.7.8 }
ufw deny from 171.36.7.8
(ip.src eq "171.36.7.8") then block