ipset add blacklistip 109.123.117.237
nft add element inet filter blacklistip { 109.123.117.237 }
ufw deny from 109.123.117.237
(ip.src eq "109.123.117.237") then block