diff --git a/inventory/group_vars/copr-keygen-stg b/inventory/group_vars/copr-keygen-stg
index d237dec944..098992c14f 100644
--- a/inventory/group_vars/copr-keygen-stg
+++ b/inventory/group_vars/copr-keygen-stg
@@ -3,9 +3,9 @@ copr_hostbase: copr-keygen-dev
 tcp_ports: []
 
 # http + signd dest ports
-custom_rules: [ '-A INPUT -p tcp -m tcp -s 172.25.32.152 --dport 80 -j ACCEPT',
+custom_rules: [ '-A INPUT -p tcp -m tcp -s 172.25.32.160 --dport 80 -j ACCEPT',
                 '-A INPUT -p tcp -m tcp -s 209.132.184.53 --dport 80 -j ACCEPT',
-                '-A INPUT -p tcp -m tcp -s 172.25.32.152 --dport 5167 -j ACCEPT',
+                '-A INPUT -p tcp -m tcp -s 172.25.32.160 --dport 5167 -j ACCEPT',
                 '-A INPUT -p tcp -m tcp -s 209.132.184.53 --dport 5167 -j ACCEPT']
 
 datacenter: cloud
diff --git a/inventory/group_vars/copr-stg b/inventory/group_vars/copr-stg
index dd30dabc41..9b8a0bda9c 100644
--- a/inventory/group_vars/copr-stg
+++ b/inventory/group_vars/copr-stg
@@ -5,7 +5,7 @@ _forward_src: "forward_dev"
 
 # don't forget to update ip in ./copr-keygen-stg, due to custom firewall rules
 
-copr_backend_ips: ["172.25.32.152", "209.132.184.53"]
+copr_backend_ips: ["172.25.32.160", "209.132.184.53"]
 keygen_host: "172.25.32.154"
 
 resolvconf: "resolv.conf/cloud"