ipset add blacklistip 139.99.35.35
nft add element inet filter blacklistip { 139.99.35.35 }
ufw deny from 139.99.35.35
(ip.src eq "139.99.35.35") then block