Connection reset by 104.192.141.1 port 22
Asked by Greg Saveliev:

Hi team!

Having followed this guide

<https://support.atlassian.com/bitbucket-cloud/docs/set-up-an-ssh-key/>

I seem to have setup all the keys needed, but this command

$ ssh -Tv git@bitbucket.org

gives me the following:

OpenSSH_8.8p1, OpenSSL 1.1.1l 24 Aug 2021  
debug1: Reading configuration data /etc/ssh/ssh_config  
debug1: Connecting to bitbucket.org \[104.192.141.1\] port 22.  
debug1: Connection established.  
debug1: identity file /c/Users/myDumbUserName/.ssh/id_rsa type 0  
debug1: identity file /c/Users/myDumbUserName/.ssh/id_rsa-cert type -1  
debug1: identity file /c/Users/myDumbUserName/.ssh/id_dsa type -1  
debug1: identity file /c/Users/myDumbUserName/.ssh/id_dsa-cert type -1  
debug1: identity file /c/Users/myDumbUserName/.ssh/id_ecdsa type -1  
debug1: identity file /c/Users/myDumbUserName/.ssh/id_ecdsa-cert type -1  
debug1: identity file /c/Users/myDumbUserName/.ssh/id_ecdsa_sk type -1  
debug1: identity file /c/Users/myDumbUserName/.ssh/id_ecdsa_sk-cert type -1  
debug1: identity file /c/Users/myDumbUserName/.ssh/id_ed25519 type -1  
debug1: identity file /c/Users/myDumbUserName/.ssh/id_ed25519-cert type -1  
debug1: identity file /c/Users/myDumbUserName/.ssh/id_ed25519_sk type -1  
debug1: identity file /c/Users/myDumbUserName/.ssh/id_ed25519_sk-cert type -1  
debug1: identity file /c/Users/myDumbUserName/.ssh/id_xmss type -1  
debug1: identity file /c/Users/myDumbUserName/.ssh/id_xmss-cert type -1  
debug1: Local version string SSH-2.0-OpenSSH_8.8  
kex_exchange_identification: read: Connection reset by peer  
Connection reset by 104.192.141.1 port 22

I have thoroughly followed this troubleshooter

<https://confluence.atlassian.com/bitbucket/troubleshoot-ssh-issues-271943403.html>

with no enlightenment. Any suggestions? Greg


Answers:
author: Theodora Boudale
body: Hi [@Greg Saveliev](/t5/user/viewprofilepage/user-id/4687195) and welcome to the community.

Is your computer behind a corporate firewall? The vast majority of TCP resets are due to misconfigured Access Control Lists and Firewalls, which might be rejecting traffic to Bitbucket's IP addresses. If the computer is behind a firewall, my first suggestion would be to ensure that our IPs are whitelisted and port 22 for SSH is open:

* <https://support.atlassian.com/bitbucket-cloud/docs/what-are-the-bitbucket-cloud-ip-addresses-i-should-use-to-configure-my-corporate-firewall/>

Another possible cause may be the higher MTU/MSS values in the packets we receive from your end, you can check the following knowledge base article which includes steps to determine if that's the case, solutions, and workarounds:

* <https://confluence.atlassian.com/bbkb/troubleshooting-bitbucket-cloud-mtu-mss-issues-858778091.html>

Another more rare cause may be due to Anycast Shift, you can read more details in the following community article:

* <https://community.atlassian.com/t5/Bitbucket-articles/Diagnosing-and-Troubleshooting-TCP-Resets-from-Bitbucket-Cloud/ba-p/1562132>

You can try modifying the hosts file on your machine to direct traffic to Bitbucket's legacy IP addresses, which are not anycast to the internet:

```
18.205.93.2
18.205.93.0
18.205.93.1
```

and then run the ssh command (If this works, please note that we suggest it as a temporary workaround, as mentioned in the article I linked).

Kind regards,  
Theodora


Tags: atl-gruland

bitbucket-cloud

cloud