ipset add blacklistip 138.117.88.10
nft add element inet filter blacklistip { 138.117.88.10 }
ufw deny from 138.117.88.10
(ip.src eq "138.117.88.10") then block