ipset add blacklistip 45.172.240.237
nft add element inet filter blacklistip { 45.172.240.237 }
ufw deny from 45.172.240.237
(ip.src eq "45.172.240.237") then block