ipset add blacklistip 109.125.139.68
nft add element inet filter blacklistip { 109.125.139.68 }
ufw deny from 109.125.139.68
(ip.src eq "109.125.139.68") then block