ipset add blacklistip 37.235.154.157
nft add element inet filter blacklistip { 37.235.154.157 }
ufw deny from 37.235.154.157
(ip.src eq "37.235.154.157") then block