ipset add blacklistip 128.106.71.40
nft add element inet filter blacklistip { 128.106.71.40 }
ufw deny from 128.106.71.40
(ip.src eq "128.106.71.40") then block