ipset add blacklistip 101.99.8.85
nft add element inet filter blacklistip { 101.99.8.85 }
ufw deny from 101.99.8.85
(ip.src eq "101.99.8.85") then block