ipset add blacklistip 4.28.235.222
nft add element inet filter blacklistip { 4.28.235.222 }
ufw deny from 4.28.235.222
(ip.src eq "4.28.235.222") then block