ipset add blacklistip 118.0.65.4
nft add element inet filter blacklistip { 118.0.65.4 }
ufw deny from 118.0.65.4
(ip.src eq "118.0.65.4") then block