ipset add blacklistip 2.228.39.106
nft add element inet filter blacklistip { 2.228.39.106 }
ufw deny from 2.228.39.106
(ip.src eq "2.228.39.106") then block