ipset add blacklistip 27.0.217.43
nft add element inet filter blacklistip { 27.0.217.43 }
ufw deny from 27.0.217.43
(ip.src eq "27.0.217.43") then block