ipset add blacklistip 140.250.42.132
nft add element inet filter blacklistip { 140.250.42.132 }
ufw deny from 140.250.42.132
(ip.src eq "140.250.42.132") then block