ipset add blacklistip 61.231.154.141
nft add element inet filter blacklistip { 61.231.154.141 }
ufw deny from 61.231.154.141
(ip.src eq "61.231.154.141") then block