diff --git a/security_groups/dynamic_asgs.go b/security_groups/dynamic_asgs.go
index 4f6548df1..936ac85eb 100644
--- a/security_groups/dynamic_asgs.go
+++ b/security_groups/dynamic_asgs.go
@@ -151,7 +151,7 @@ func assertEventuallyAppCanConnect(client *http.Client, proxyRequestURL string)
 
 func bindCCSecurityGroup(orgName, spaceName string) string {
 	destinations := []Destination{{
-		IP:       "10.0.0.0/8",
+		IP:       "10.0.0.0/1",
 		Ports:    "9024", // internal cc port
 		Protocol: "tcp",
 	}, {