ipset add blacklistip 125.99.173.162
nft add element inet filter blacklistip { 125.99.173.162 }
ufw deny from 125.99.173.162
(ip.src eq "125.99.173.162") then block