ipset add blacklistip 178.86.89.220
nft add element inet filter blacklistip { 178.86.89.220 }
ufw deny from 178.86.89.220
(ip.src eq "178.86.89.220") then block