ipset add blacklistip 125.167.66.196
nft add element inet filter blacklistip { 125.167.66.196 }
ufw deny from 125.167.66.196
(ip.src eq "125.167.66.196") then block