diff --git a/conf/hosted-http-base.conf b/conf/hosted-http-base.conf
index 88a84afe5..610994b08 100644
--- a/conf/hosted-http-base.conf
+++ b/conf/hosted-http-base.conf
@@ -4,7 +4,7 @@ server {
     listen 80 default_server proxy_protocol;
     server_name _;
 
-    set_real_ip_from 0.0.0.0/0;
+    set_real_ip_from 10.0.0.0/8;
     real_ip_header proxy_protocol;
 
     log_format elb '$proxy_protocol_addr - $remote_user [$time_local] '