ipset add blacklistip 123.169.41.2
nft add element inet filter blacklistip { 123.169.41.2 }
ufw deny from 123.169.41.2
(ip.src eq "123.169.41.2") then block