[CentOS] [OT] rsa host key change

Bill Campbell centos at celestial.com
Fri Apr 17 02:55:19 UTC 2009

On Thu, Apr 16, 2009, Ed Donahue wrote:
>Anyone ever come across a linux server host key changing with out a
>reboot, sshd restart, change in negotiating (SSHv1, SSHv2), and
>different DNS name or IP address?

That would make me very suspicious that the box had been cracked,
and that a foreign sshd had been substituted for the real one.

rpm -V is your friend.

INTERNET:   bill at celestial.com  Bill Campbell; Celestial Software LLC
URL: http://www.celestial.com/  PO Box 820; 6641 E. Mercer Way
Voice:          (206) 236-1676  Mercer Island, WA 98040-0820
Fax:            (206) 232-9186  Skype: jwccsllc (206) 855-5792

DOS: n., A small annoying boot virus that causes random spontaneous system
     crashes, usually just before saving a massive project.  Easily cured by
     UNIX.  See also MS-DOS, IBM-DOS, DR-DOS.

More information about the CentOS mailing list