ipset add blacklistip 35.198.236.86
nft add element inet filter blacklistip { 35.198.236.86 }
ufw deny from 35.198.236.86
(ip.src eq "35.198.236.86") then block