ipset add blacklistip 1.1.198.211
nft add element inet filter blacklistip { 1.1.198.211 }
ufw deny from 1.1.198.211
(ip.src eq "1.1.198.211") then block