Actually people, spam ips like ;27032 or they would divide ip and port like 88 88 88,88 then port 2810 etc.
hence most reliable idea till yet seems block with 3 digits and less than 3 digits, if consecutive.
As, Natesh explained, but unfortunately his pattern didn't work as he said it will !!