2.11.1.1.4. POSSIBLE DNS SPOOFING

When connecting to a server via SSH, you may encounter the error "WARNING: POSSIBLE DNS SPOOFING DETECTED!". It typically appears as follows:

This error occurs due to a change in the server certificate and its IP address. Such a situation may arise:

  • Or in the case when there is indeed a deliberate deception of your device and attackers substitute the IP address of the host you are trying to connect to (in the example example.ftp.tools).
  • Either in the case of transferring a hosting account between our servers (for example, during migration or for technical reasons). In such a case, the error will most often be paired with the error "REMOTE HOST IDENTIFICATION HAS CHANGED!".

To resolve it, you need to delete the existing key for the address. This can be done by:

  • After executing the command: 
    ssh-keygen -R example.ftp.tools

    replace example.ftp.tools with the address you are connecting to.

  • Remove the key entry in the known_hosts file. Typically, this file is located at /home/user/.ssh/known_hosts on your device. In this file, the entries will appear as follows:Specifically, in this example, you need to delete all text from example.ftp.tools to xxxxxxx.ftp.tools, that is:
Content