ipset add blacklistip 201.224.33.250
nft add element inet filter blacklistip { 201.224.33.250 }
ufw deny from 201.224.33.250
(ip.src eq "201.224.33.250") then block