ipset add blacklistip 103.41.32.212
nft add element inet filter blacklistip { 103.41.32.212 }
ufw deny from 103.41.32.212
(ip.src eq "103.41.32.212") then block