What are the Bitbucket Cloud IP addresses I should use to configure my corporate firewall?

tip/resting Created with Sketch.

These IP addresses could change at any time. Log in with your Atlassian account to watch this page or follow our blog for updates. Our DNS entry is the trusted source of information for our current IP.

Using SSH to commit from behind a corporate firewall may require your network administrator to make specific network configuration changes to permit SSH connectivity from your computer to Bitbucket. Every network configuration is different, so we cannot give you detailed instructions. Bitbucket uses the standard ports for HTTP/HTTPS/SSH which are 80/443/22.

Bitbucket Cloud uses Amazon's CloudFront CDN to deliver static content. The IP address ranges used by CloudFront edge servers can be found here.

Valid IP addresses for bitbucket.org, api.bitbucket.org, and altssh.bitbucket.org

Outbound traffic will come from Atlassian's public IP range in addition to the below addresses.

IPv6 inbound for bitbucket.org, api.bitbucket.org, and altssh.bitbucket.org
  • 2406:da00:ff00::22cd:e0db
  • 2406:da00:ff00::6b17:d1f5
  • 2406:da00:ff00::3403:4be7
  • 2406:da00:ff00::22c3:9b0a
  • 2406:da00:ff00::22c5:2ef4
  • 2406:da00:ff00::22c2:0513
  • 2406:da00:ff00::34cc:ea4a
  • 2406:da00:ff00::22e9:9f55
  • 2406:da00:ff00::22c0:3470 
  • 2406:da00:ff00::34c8:9c5c
  • 2406:da00:ff00::12d0:47c8
  • 2406:da00:ff00::22ed:a9a3
  • 2406:da00:ff00::23a8:5071
  • 2406:da00:ff00::36ec:9434
  • 2406:da00:ff00::3416:7161
  • 2406:da00:ff00::36ec:bea6
  • 2406:da00:ff00::12cd:ae3d
  • 2406:da00:ff00::12cc:b432 
  • 2406:da00:ff00::1714:aa06
  • 2406:da00:ff00::342d:4312
  • 2406:da00:ff00::22ee:e721
  • 2406:da00:ff00::34cf:03c4
  • 2406:da00:ff00::3657:a859
  • 2406:da00:ff00::1716:0c22
  • 2406:da00:ff00::36ec:507a
  • 2406:da00:ff00::3448:67ee
  • 2406:da00:ff00::36ad:fb4d
  • 2406:da00:ff00::22ce:9394
  • 2406:da00:ff00::12d0:5d6e
  • 2406:da00:ff00::3402:732e
  • 2406:da00:ff00::36d1:8b98
  • 2406:da00:ff00::3414:6492
  • 2406:da00:ff00::3437:b4cb
  • 2406:da00:ff00::22e2:3a76
  • 2406:da00:ff00::34c9:c443
  • 2406:da00:ff00::3405:6cad
  • 2406:da00:ff00::12ea:0a19
  • 2406:da00:ff00::23a8:6621
  • 2406:da00:ff00::3401:9341
  • 2406:da00:ff00::3654:c786
  • 2406:da00:ff00::3448:4e57
  • 2406:da00:ff00::36a4:e08c
  • 2406:da00:ff00::36a4:f8a6
  • 2406:da00:ff00::22c8:ada3
  • 2406:da00:ff00::34cd:a4b9
  • 2406:da00:ff00::23a8:b9b1
  • 2406:da00:ff00::3402:affc
  • 2406:da00:ff00::12cd:d438
  • 2406:da00:ff00::34ce:b43b
  • 2406:da00:ff00::342d:1804
  • 2406:da00:ff00::36ae:07e7
  • 2406:da00:ff00::3456:314c
  • 2406:da00:ff00::36af:42a0
  • 2406:da00:ff00::3414:0248

Valid IP addresses for Bitbucket Pipelines build environments

You can use these IP ranges to whitelist requests made from your build environments. SSH keyscans are also performed from within the build environment. Note that Bitbucket Pipelines is a shared service and the IP addresses below are used for builds configured by all of our customers. In addition to IP whitelisting, you should use a secure means of authentication for any services exposed to Bitbucket Pipelines.

IPv4 outbound
Last modified on Apr 24, 2019

Was this helpful?

Provide feedback about this article
Powered by Confluence and Scroll Viewport.