ipset add blacklistip 94.25.171.146
nft add element inet filter blacklistip { 94.25.171.146 }
ufw deny from 94.25.171.146
(ip.src eq "94.25.171.146") then block