ipset add blacklistip 114.24.89.211
nft add element inet filter blacklistip { 114.24.89.211 }
ufw deny from 114.24.89.211
(ip.src eq "114.24.89.211") then block