ipset add blacklistip 178.251.222.3
nft add element inet filter blacklistip { 178.251.222.3 }
ufw deny from 178.251.222.3
(ip.src eq "178.251.222.3") then block