ipset add blacklistip 5.149.203.33
nft add element inet filter blacklistip { 5.149.203.33 }
ufw deny from 5.149.203.33
(ip.src eq "5.149.203.33") then block