ipset add blacklistip 42.200.173.173
nft add element inet filter blacklistip { 42.200.173.173 }
ufw deny from 42.200.173.173
(ip.src eq "42.200.173.173") then block