ipset add blacklistip 59.95.68.248
nft add element inet filter blacklistip { 59.95.68.248 }
ufw deny from 59.95.68.248
(ip.src eq "59.95.68.248") then block