ipset add blacklistip 61.231.217.201
nft add element inet filter blacklistip { 61.231.217.201 }
ufw deny from 61.231.217.201
(ip.src eq "61.231.217.201") then block