What are the Bitbucket Cloud IP addresses I should use to configure my corporate firewall?

tip/resting Created with Sketch.

These IP addresses could change at any time. Log in with your Atlassian account to watch this page or follow our blog for updates. Our DNS entry is the trusted source of information for our current IP.

Using SSH to commit from behind a corporate firewall may require your network administrator to make specific network configuration changes to permit SSH connectivity from your computer to Bitbucket. Every network configuration is different, so we cannot give you detailed instructions. Bitbucket uses the standard ports for HTTP/HTTPS/SSH which are 80/443/22.

Bitbucket Cloud uses Amazon's CloudFront CDN to deliver static content. The IP address ranges used by CloudFront edge servers can be found here.

Valid IP addresses for bitbucket.org, api.bitbucket.org, and altssh.bitbucket.org

IPv4 inbound for bitbucket.org
  • 104.192.143.1
  • 104.192.143.2
  • 104.192.143.3
  • 104.192.143.65
  • 104.192.143.66
  • 104.192.143.67
IPv4 outbound for bitbucket.org

(for hooks like POST)

  • 104.192.136.0/21
  • 34.198.203.127
  • 34.198.32.85
IPv6 inbound for bitbucket.org
  • 2401:1d80:1010::150
  • 2401:1d80:1010::151
  • 2401:1d80:1010::152
  • 2401:1d80:1003::150
  • 2401:1d80:1003::151
  • 2401:1d80:1003::152
IPv6 outbound for bitbucket.org

(for hooks like POST)

  • 2401:1d80:1010::/64
  • 2401:1d80:1003::/64
IPv4 inbound for api.bitbucket.org
  • 104.192.143.4
  • 104.192.143.5
  • 104.192.143.6
  • 104.192.143.68
  • 104.192.143.69
  • 104.192.143.70
IPv4 inbound for api.bitbucket.org
  • 2401:1d80:1010::153
  • 2401:1d80:1010::154
  • 2401:1d80:1010::155
  • 2401:1d80:1003::153
  • 2401:1d80:1003::154
  • 2401:1d80:1003::155
(Starting July 28, 2018) IPv6 inbound for bitbucket.org, api.bitbucket.org, and altssh.bitbucket.org
  • 2406:da00:ff00::22cd:e0db
  • 2406:da00:ff00::6b17:d1f5
  • 2406:da00:ff00::3403:4be7
  • 2406:da00:ff00::22c3:9b0a
  • 2406:da00:ff00::22c5:2ef4
  • 2406:da00:ff00::22c2:0513
  • 2406:da00:ff00::34cc:ea4a
  • 2406:da00:ff00::22e9:9f55
  • 2406:da00:ff00::22c0:3470 
  • 2406:da00:ff00::34c8:9c5c
  • 2406:da00:ff00::12d0:47c8
  • 2406:da00:ff00::22ed:a9a3
  • 2406:da00:ff00::23a8:5071
  • 2406:da00:ff00::36ec:9434
  • 2406:da00:ff00::3416:7161
  • 2406:da00:ff00::36ec:bea6
  • 2406:da00:ff00::12cd:ae3d
  • 2406:da00:ff00::12cc:b432 
  • 2406:da00:ff00::1714:aa06
  • 2406:da00:ff00::342d:4312
  • 2406:da00:ff00::22ee:e721
  • 2406:da00:ff00::34cf:03c4
  • 2406:da00:ff00::3657:a859
  • 2406:da00:ff00::1716:0c22
  • 2406:da00:ff00::36ec:507a
  • 2406:da00:ff00::3448:67ee
  • 2406:da00:ff00::36ad:fb4d
  • 2406:da00:ff00::22ce:9394
  • 2406:da00:ff00::12d0:5d6e
  • 2406:da00:ff00::3402:732e
  • 2406:da00:ff00::36d1:8b98
  • 2406:da00:ff00::3414:6492
  • 2406:da00:ff00::3437:b4cb
  • 2406:da00:ff00::22e2:3a76
  • 2406:da00:ff00::34c9:c443
  • 2406:da00:ff00::3405:6cad
  • 2406:da00:ff00::12ea:0a19
  • 2406:da00:ff00::23a8:6621
  • 2406:da00:ff00::3401:9341
  • 2406:da00:ff00::3654:c786
  • 2406:da00:ff00::3448:4e57
  • 2406:da00:ff00::36a4:e08c
  • 2406:da00:ff00::36a4:f8a6
  • 2406:da00:ff00::22c8:ada3
  • 2406:da00:ff00::34cd:a4b9
  • 2406:da00:ff00::23a8:b9b1
  • 2406:da00:ff00::3402:affc
  • 2406:da00:ff00::12cd:d438
  • 2406:da00:ff00::34ce:b43b
  • 2406:da00:ff00::342d:1804
  • 2406:da00:ff00::36ae:07e7
  • 2406:da00:ff00::3456:314c
  • 2406:da00:ff00::36af:42a0
  • 2406:da00:ff00::3414:0248

Valid IP addresses for Bitbucket Pipelines build environments

You can use these IP ranges to whitelist requests made from your build environments. Note that Bitbucket Pipelines is a shared service and the IP addresses below are used for builds configured by all of our customers. In addition to IP whitelisting, you should use a secure means of authentication for any services exposed to Bitbucket Pipelines.

IPv4 outbound
  • 34.199.54.113/32
  • 34.232.25.90/32
  • 34.232.119.183/32
  • 34.236.25.177/32
  • 35.171.175.212/32
  • 52.54.90.98/32
  • 52.202.195.162/32
  • 52.203.14.55/32
  • 52.204.96.37/32

Valid IP addresses for Bitbucket Pipelines services

You can use this IP range to whitelist requests made by Bitbucket Pipelines services (not your build environments) to external systems such as performing an SSH fingerprint lookup. Note that this IP range may also be used by other Atlassian systems in addition to Bitbucket Pipelines.


IPv4 outbound
  • 52.8.84.222/32
  • 52.52.234.127/32
  • 104.192.136.0/21
Last modified on Jul 26, 2018

Was this helpful?

Yes
No
Provide feedback about this article
Powered by Confluence and Scroll Viewport.