ipset add blacklistip 187.94.111.130
nft add element inet filter blacklistip { 187.94.111.130 }
ufw deny from 187.94.111.130
(ip.src eq "187.94.111.130") then block