ipset add blacklistip 40.76.139.157
nft add element inet filter blacklistip { 40.76.139.157 }
ufw deny from 40.76.139.157
(ip.src eq "40.76.139.157") then block