ipset add blacklistip 111.253.31.213
nft add element inet filter blacklistip { 111.253.31.213 }
ufw deny from 111.253.31.213
(ip.src eq "111.253.31.213") then block