ipset add blacklistip 5.102.236.97
nft add element inet filter blacklistip { 5.102.236.97 }
ufw deny from 5.102.236.97
(ip.src eq "5.102.236.97") then block