def rule(event):
    if all(
        [
            event.deep_get("EventID", default="") == 16403,
            any(
                [
                    "http://1" in event.deep_get("RemoteName", default=""),
                    "http://2" in event.deep_get("RemoteName", default=""),
                    "http://3" in event.deep_get("RemoteName", default=""),
                    "http://4" in event.deep_get("RemoteName", default=""),
                    "http://5" in event.deep_get("RemoteName", default=""),
                    "http://6" in event.deep_get("RemoteName", default=""),
                    "http://7" in event.deep_get("RemoteName", default=""),
                    "http://8" in event.deep_get("RemoteName", default=""),
                    "http://9" in event.deep_get("RemoteName", default=""),
                    "https://1" in event.deep_get("RemoteName", default=""),
                    "https://2" in event.deep_get("RemoteName", default=""),
                    "https://3" in event.deep_get("RemoteName", default=""),
                    "https://4" in event.deep_get("RemoteName", default=""),
                    "https://5" in event.deep_get("RemoteName", default=""),
                    "https://6" in event.deep_get("RemoteName", default=""),
                    "https://7" in event.deep_get("RemoteName", default=""),
                    "https://8" in event.deep_get("RemoteName", default=""),
                    "https://9" in event.deep_get("RemoteName", default=""),
                ]
            ),
            not any(
                [
                    any(
                        [
                            "://10." in event.deep_get("RemoteName", default=""),
                            "://192.168." in event.deep_get("RemoteName", default=""),
                            "://172.16." in event.deep_get("RemoteName", default=""),
                            "://172.17." in event.deep_get("RemoteName", default=""),
                            "://172.18." in event.deep_get("RemoteName", default=""),
                            "://172.19." in event.deep_get("RemoteName", default=""),
                            "://172.20." in event.deep_get("RemoteName", default=""),
                            "://172.21." in event.deep_get("RemoteName", default=""),
                            "://172.22." in event.deep_get("RemoteName", default=""),
                            "://172.23." in event.deep_get("RemoteName", default=""),
                            "://172.24." in event.deep_get("RemoteName", default=""),
                            "://172.25." in event.deep_get("RemoteName", default=""),
                            "://172.26." in event.deep_get("RemoteName", default=""),
                            "://172.27." in event.deep_get("RemoteName", default=""),
                            "://172.28." in event.deep_get("RemoteName", default=""),
                            "://172.29." in event.deep_get("RemoteName", default=""),
                            "://172.30." in event.deep_get("RemoteName", default=""),
                            "://172.31." in event.deep_get("RemoteName", default=""),
                            "://127." in event.deep_get("RemoteName", default=""),
                            "://169.254." in event.deep_get("RemoteName", default=""),
                        ]
                    ),
                    any(
                        [
                            "https://7-" in event.deep_get("RemoteName", default=""),
                            "http://7-" in event.deep_get("RemoteName", default=""),
                        ]
                    ),
                ]
            ),
        ]
    ):
        return True
    return False
