ipset add blacklistip 43.242.123.33
nft add element inet filter blacklistip { 43.242.123.33 }
ufw deny from 43.242.123.33
(ip.src eq "43.242.123.33") then block