ipset add blacklistip 36.224.226.172
nft add element inet filter blacklistip { 36.224.226.172 }
ufw deny from 36.224.226.172
(ip.src eq "36.224.226.172") then block