diff --git a/root_locals.tf b/root_locals.tf
index 44056d6..a497e8c 100644
--- a/root_locals.tf
+++ b/root_locals.tf
@@ -60,7 +60,7 @@ locals {
 
   ip_allowlist = concat(local.developer_ip_list, local.trusted_ip_list)
 
-  ip_blocked_list = "10.120.2.120"
+  ip_blocked_list = "10.120.2.120/32"
 
   ecr_account_number = local.environment == "sbox" ? data.aws_caller_identity.current.account_id : data.aws_ssm_parameter.mgmt_account_number.value