ipset add blacklistip 86.98.25.222
nft add element inet filter blacklistip { 86.98.25.222 }
ufw deny from 86.98.25.222
(ip.src eq "86.98.25.222") then block