ipset add blacklistip 123.170.20.193
nft add element inet filter blacklistip { 123.170.20.193 }
ufw deny from 123.170.20.193
(ip.src eq "123.170.20.193") then block