ipset add blacklistip 112.199.100.6
nft add element inet filter blacklistip { 112.199.100.6 }
ufw deny from 112.199.100.6
(ip.src eq "112.199.100.6") then block