ipset add blacklistip 125.165.41.235
nft add element inet filter blacklistip { 125.165.41.235 }
ufw deny from 125.165.41.235
(ip.src eq "125.165.41.235") then block