ipset add blacklistip 212.156.79.202
nft add element inet filter blacklistip { 212.156.79.202 }
ufw deny from 212.156.79.202
(ip.src eq "212.156.79.202") then block