ipset add blacklistip 201.236.222.194
nft add element inet filter blacklistip { 201.236.222.194 }
ufw deny from 201.236.222.194
(ip.src eq "201.236.222.194") then block