ipset add blacklistip 36.95.22.173
nft add element inet filter blacklistip { 36.95.22.173 }
ufw deny from 36.95.22.173
(ip.src eq "36.95.22.173") then block