ipset add blacklistip 112.231.230.233
nft add element inet filter blacklistip { 112.231.230.233 }
ufw deny from 112.231.230.233
(ip.src eq "112.231.230.233") then block