ipset add blacklistip 189.231.11.223
nft add element inet filter blacklistip { 189.231.11.223 }
ufw deny from 189.231.11.223
(ip.src eq "189.231.11.223") then block