ipset add blacklistip 220.133.133.99
nft add element inet filter blacklistip { 220.133.133.99 }
ufw deny from 220.133.133.99
(ip.src eq "220.133.133.99") then block