ipset add blacklistip 111.252.127.32
nft add element inet filter blacklistip { 111.252.127.32 }
ufw deny from 111.252.127.32
(ip.src eq "111.252.127.32") then block