ipset add blacklistip 209.141.43.175
nft add element inet filter blacklistip { 209.141.43.175 }
ufw deny from 209.141.43.175
(ip.src eq "209.141.43.175") then block