ipset add blacklistip 43.248.108.199
nft add element inet filter blacklistip { 43.248.108.199 }
ufw deny from 43.248.108.199
(ip.src eq "43.248.108.199") then block