diff --git a/eql/functions.py b/eql/functions.py
index d04710a..ea8310c 100644
--- a/eql/functions.py
+++ b/eql/functions.py
@@ -196,7 +196,7 @@ def get_callback(cls, _, *cidr_matches):
         """Get the callback function with all the masks converted."""
         # Python 2 support
         if sys.version_info.major == 2:
-            cidr_networks = [ipaddress.ip_network(unicode(cidr.value, "utf-8"), strict=False) for cidr in cidr_matches]  # noqa: F821 
+            cidr_networks = [ipaddress.ip_network(unicode(cidr.value, "utf-8"), strict=False) for cidr in cidr_matches]  # noqa: F821
         else:
             cidr_networks = [ipaddress.ip_network(cidr.value, strict=False) for cidr in cidr_matches]