ipset add blacklistip 88.249.126.198
nft add element inet filter blacklistip { 88.249.126.198 }
ufw deny from 88.249.126.198
(ip.src eq "88.249.126.198") then block