diff --git a/inventory/group_vars/copr-keygen-stg b/inventory/group_vars/copr-keygen-stg
index b05f7b7460..04795fa45e 100644
--- a/inventory/group_vars/copr-keygen-stg
+++ b/inventory/group_vars/copr-keygen-stg
@@ -3,10 +3,10 @@ copr_hostbase: copr-keygen-dev
 tcp_ports: []
 
 # http + signd dest ports
-custom_rules: [ '-A INPUT -p tcp -m tcp -s 172.25.32.206 --dport 80 -j ACCEPT',
-                '-A INPUT -p tcp -m tcp -s 172.25.159.112 --dport 80 -j ACCEPT',
-                '-A INPUT -p tcp -m tcp -s 172.25.32.206 --dport 5167 -j ACCEPT',
-                '-A INPUT -p tcp -m tcp -s 172.25.159.112 --dport 5167 -j ACCEPT']
+custom_rules: [ '-A INPUT -p tcp -m tcp -s 172.25.32.11 --dport 80 -j ACCEPT',
+                '-A INPUT -p tcp -m tcp -s 172.25.153.203 --dport 80 -j ACCEPT',
+                '-A INPUT -p tcp -m tcp -s 172.25.32.211 --dport 5167 -j ACCEPT',
+                '-A INPUT -p tcp -m tcp -s 172.25.153.203 --dport 5167 -j ACCEPT']
 
 datacenter: cloud
 
diff --git a/inventory/group_vars/copr-stg b/inventory/group_vars/copr-stg
index 2ee315d3d0..f807347699 100644
--- a/inventory/group_vars/copr-stg
+++ b/inventory/group_vars/copr-stg
@@ -5,7 +5,7 @@ _forward_src: "forward_dev"
 
 # don't forget to update ip in ./copr-keygen-stg, due to custom firewall rules
 
-copr_backend_ips: ["172.25.32.206", "172.25.159.112"]
+copr_backend_ips: ["172.25.32.211", "172.25.153.203"]
 keygen_host: "172.25.32.205"
 
 resolvconf: "resolv.conf/cloud"