ipset add blacklistip 113.120.161.79
nft add element inet filter blacklistip { 113.120.161.79 }
ufw deny from 113.120.161.79
(ip.src eq "113.120.161.79") then block