ipset add blacklistip 121.66.224.166
nft add element inet filter blacklistip { 121.66.224.166 }
ufw deny from 121.66.224.166
(ip.src eq "121.66.224.166") then block