diff --git a/admin/settings/security.php b/admin/settings/security.php
index 72fac4a77d9..f4dfde50952 100644
--- a/admin/settings/security.php
+++ b/admin/settings/security.php
@@ -169,7 +169,7 @@ if ($hassiteconfig) { // speedup for non-admins, add all caps used on this page
 
     // Settings elements used by the \core\files\curl_security_helper class.
     $blockedhostsdefault = [
-        '127.0.0.1',
+        '127.0.0.0/8',
         '192.168.0.0/16',
         '10.0.0.0/8',
         '172.16.0.0/12',