diff --git a/inventory/group_vars/copr-keygen-stg b/inventory/group_vars/copr-keygen-stg
index bd7e74fd5a..cde6565526 100644
--- a/inventory/group_vars/copr-keygen-stg
+++ b/inventory/group_vars/copr-keygen-stg
@@ -3,10 +3,10 @@ copr_hostbase: copr-keygen-dev
 tcp_ports: []
 
 # http + signd dest ports
-custom_rules: [ '-A INPUT -p tcp -m tcp -s 172.25.32.211 --dport 80 -j ACCEPT',
-                '-A INPUT -p tcp -m tcp -s 172.25.153.203 --dport 80 -j ACCEPT',
-                '-A INPUT -p tcp -m tcp -s 172.25.32.211 --dport 5167 -j ACCEPT',
-                '-A INPUT -p tcp -m tcp -s 172.25.153.203 --dport 5167 -j ACCEPT']
+custom_rules: [ '-A INPUT -p tcp -m tcp -s 172.25.32.217 --dport 80 -j ACCEPT',
+                '-A INPUT -p tcp -m tcp -s 172.25.155.215 --dport 80 -j ACCEPT',
+                '-A INPUT -p tcp -m tcp -s 172.25.32.217 --dport 5167 -j ACCEPT',
+                '-A INPUT -p tcp -m tcp -s 172.25.155.215 --dport 5167 -j ACCEPT']
 
 datacenter: cloud
 
diff --git a/inventory/group_vars/copr-stg b/inventory/group_vars/copr-stg
index f807347699..ba54a93df9 100644
--- a/inventory/group_vars/copr-stg
+++ b/inventory/group_vars/copr-stg
@@ -5,7 +5,7 @@ _forward_src: "forward_dev"
 
 # don't forget to update ip in ./copr-keygen-stg, due to custom firewall rules
 
-copr_backend_ips: ["172.25.32.211", "172.25.153.203"]
+copr_backend_ips: ["172.25.32.217", "172.25.155.215"]
 keygen_host: "172.25.32.205"
 
 resolvconf: "resolv.conf/cloud"