ipset add blacklistip 200.88.158.146
nft add element inet filter blacklistip { 200.88.158.146 }
ufw deny from 200.88.158.146
(ip.src eq "200.88.158.146") then block