ipset add blacklistip 111.248.244.35
nft add element inet filter blacklistip { 111.248.244.35 }
ufw deny from 111.248.244.35
(ip.src eq "111.248.244.35") then block