ipset add blacklistip 117.2.161.244
nft add element inet filter blacklistip { 117.2.161.244 }
ufw deny from 117.2.161.244
(ip.src eq "117.2.161.244") then block