What are the Bitbucket Cloud IP addresses I should use to configure my corporate firewall?
Using SSH to commit from behind a corporate firewall may require your network administrator to make specific network configuration changes to permit SSH connectivity from your computer to Bitbucket. Every network configuration is different, so we cannot give you detailed instructions. Bitbucket uses the standard ports for HTTP/HTTPS/SSH which are 80/443/22.
Valid IP addresses for bitbucket.org
| IPv4 addresses | IPv6 addresses | ||
Inbound (bound to bitbucket.org) |
Outbound (for hooks like POST) |
Inbound (bound to bitbucket.org) |
Outbound (for hooks like POST) |
|---|---|---|---|
104.192.143.1 |
104.192.143.192/28 | 2401:1d80:1010::150 | 2401:1d80:1010::/64 |
| 104.192.143.2 | 104.192.143.208/28 | 2401:1d80:1010::151 | 2401:1d80:1003::/64 |
| 104.192.143.3 | 104.192.143.0/24 | 2401:1d80:1010::152 | |
| 104.192.143.65 | 34.198.203.127 | 2401:1d80:1003::150 | |
| 104.192.143.66 | 34.198.178.64 | 2401:1d80:1003::151 | |
| 104.192.143.67 | 34.198.32.85 |
2401:1d80:1003::152 | |
Valid IP addresses for api.bitbucket.org
| IPv4 Inbound (bound to api.bitbucket.org) | IPv6 Inbound (bound to api.bitbucket.org) |
|---|---|
| 104.192.143.4 | 2401:1d80:1010::153 |
| 104.192.143.5 | 2401:1d80:1010::154 |
| 104.192.143.6 | 2401:1d80:1010::155 |
| 104.192.143.68 | 2401:1d80:1003::153 |
| 104.192.143.69 | 2401:1d80:1003::154 |
| 104.192.143.70 | 2401:1d80:1003::155 |
Valid IP addresses for Bitbucket Pipelines build environments
You can use these IP ranges to whitelist requests made from your build environments. Note that Bitbucket Pipelines is a shared service and the IP addresses below are used for builds configured by all of our customers. In addition to IP whitelisting, you should use a secure means of authentication for any services exposed to Bitbucket Pipelines.
| IPv4 Outbound |
|---|
| 23.20.208.24/32 |
| 52.7.19.238/32 |
| 52.55.104.10/32 |
| 52.203.194.12/32 |
Valid IP addresses for Bitbucket Pipelines services
You can use this IP range to whitelist requests made by Bitbucket Pipelines services (not your build environments) to external systems such as performing an SSH fingerprint lookup. Note that this IP range may also be used by other Atlassian systems in addition to Bitbucket Pipelines.
| IPv4 Outbound |
|---|
| 104.192.136.0/21 |
These IP addresses could change at any time. You can watch this page or our blog for updates. Our DNS entry is the trusted source of information for our current IP.