ipset add blacklistip 123.160.234.225
nft add element inet filter blacklistip { 123.160.234.225 }
ufw deny from 123.160.234.225
(ip.src eq "123.160.234.225") then block