ipset add blacklistip 103.152.232.228
nft add element inet filter blacklistip { 103.152.232.228 }
ufw deny from 103.152.232.228
(ip.src eq "103.152.232.228") then block