SSH Host key changing for no discernible reason
by dwm1945 from LinuxQuestions.org on (#6F0EV)
Running Centos 6.6 on a Microsoft Azure cloud server.
A while ago my server started having it's SSH Host Key changed at random intervals. When I first setup this server, this was not a problem. The server's SSH access is locked down by iptables to only allow connections from my local network. lastb shows no bad logins. last only shows connections from my local network.
I initially suspected some sort of attack, but I can't think of any value to an attacker to changing the host keys as their purpose is to identify the server and they don't enable access.
It seems that the system will generate new keys when rebooted but the system shows an uptime of 621 days and I've had many new keys appearing in that time frame.
I can't imagine any intentional process on the system which would change the keys over recent intervals of 5, 5, 9, 60, 10, 9 etc.
Any idea what might be causing this?
A while ago my server started having it's SSH Host Key changed at random intervals. When I first setup this server, this was not a problem. The server's SSH access is locked down by iptables to only allow connections from my local network. lastb shows no bad logins. last only shows connections from my local network.
I initially suspected some sort of attack, but I can't think of any value to an attacker to changing the host keys as their purpose is to identify the server and they don't enable access.
It seems that the system will generate new keys when rebooted but the system shows an uptime of 621 days and I've had many new keys appearing in that time frame.
I can't imagine any intentional process on the system which would change the keys over recent intervals of 5, 5, 9, 60, 10, 9 etc.
Any idea what might be causing this?