ipset add blacklistip 108.189.96.32
nft add element inet filter blacklistip { 108.189.96.32 }
ufw deny from 108.189.96.32
(ip.src eq "108.189.96.32") then block