ip and tcp and (remotePort == 80 or remotePort == 443) and (
  (remoteAddr >= 91.76.0.0 and remoteAddr <= 91.79.255.255)
  or (remoteAddr >= 85.140.0.0 and remoteAddr <= 85.141.255.255)
  or (remoteAddr >= 62.118.0.0 and remoteAddr <= 62.118.255.255)
  or (remoteAddr >= 81.195.0.0 and remoteAddr <= 81.195.255.255)
  or (remoteAddr >= 83.237.0.0 and remoteAddr <= 83.237.255.255)
  or (remoteAddr >= 89.175.0.0 and remoteAddr <= 89.175.255.255)
  or (remoteAddr >= 178.141.0.0 and remoteAddr <= 178.141.255.255)
  or (remoteAddr >= 213.87.0.0 and remoteAddr <= 213.87.255.255)
  or (remoteAddr >= 5.227.0.0 and remoteAddr <= 5.227.127.255)
  or (remoteAddr >= 62.5.128.0 and remoteAddr <= 62.5.255.255)
  or (remoteAddr >= 77.43.128.0 and remoteAddr <= 77.43.255.255)
  or (remoteAddr >= 77.66.128.0 and remoteAddr <= 77.66.255.255)
  or (remoteAddr >= 82.204.128.0 and remoteAddr <= 82.204.255.255)
  or (remoteAddr >= 83.242.128.0 and remoteAddr <= 83.242.255.255)
  or (remoteAddr >= 95.64.128.0 and remoteAddr <= 95.64.255.255)
  or (remoteAddr >= 95.104.128.0 and remoteAddr <= 95.104.255.255)
  or (remoteAddr >= 95.139.0.0 and remoteAddr <= 95.139.127.255)
  or (remoteAddr >= 95.153.128.0 and remoteAddr <= 95.153.255.255)
  or (remoteAddr >= 178.155.0.0 and remoteAddr <= 178.155.127.255)
  or (remoteAddr >= 212.188.0.0 and remoteAddr <= 212.188.127.255)
  or (remoteAddr >= 212.248.0.0 and remoteAddr <= 212.248.127.255)
  or (remoteAddr >= 213.27.0.0 and remoteAddr <= 213.27.127.255)
  or (remoteAddr >= 37.139.192.0 and remoteAddr <= 37.139.255.255)
  or (remoteAddr >= 82.96.192.0 and remoteAddr <= 82.96.255.255)
  or (remoteAddr >= 94.72.0.0 and remoteAddr <= 94.72.63.255)
  or (remoteAddr >= 94.77.128.0 and remoteAddr <= 94.77.191.255)
  or (remoteAddr >= 178.72.64.0 and remoteAddr <= 178.72.127.255)
  or (remoteAddr >= 195.34.0.0 and remoteAddr <= 195.34.63.255)
  or (remoteAddr >= 195.210.128.0 and remoteAddr <= 195.210.191.255)
  or (remoteAddr >= 212.30.128.0 and remoteAddr <= 212.30.191.255)
)
