ipset add blacklistip 85.98.208.117
nft add element inet filter blacklistip { 85.98.208.117 }
ufw deny from 85.98.208.117
(ip.src eq "85.98.208.117") then block