ipset add blacklistip 116.87.66.130
nft add element inet filter blacklistip { 116.87.66.130 }
ufw deny from 116.87.66.130
(ip.src eq "116.87.66.130") then block