ipset add blacklistip 20.29.47.111
nft add element inet filter blacklistip { 20.29.47.111 }
ufw deny from 20.29.47.111
(ip.src eq "20.29.47.111") then block