ipset add blacklistip 222.253.0.138
nft add element inet filter blacklistip { 222.253.0.138 }
ufw deny from 222.253.0.138
(ip.src eq "222.253.0.138") then block