ipset add blacklistip 111.125.106.196
nft add element inet filter blacklistip { 111.125.106.196 }
ufw deny from 111.125.106.196
(ip.src eq "111.125.106.196") then block