Dave's Brain

Browse - Computer Tips - I get: Address IP-address maps to Domain-Name, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!

Date: 2012may8
OS: Linux
Product: scp, ssh, openssh-clients

Q.  I get: Address <IP-address> maps to <Domain-Name>, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!
When I try to scp or ssh to a certain IP-address.
What should I make of this?

A.  ssh and ssh usually work so flawlessly for moving data about we
sometimes forget they are also about security.

Literally this error means that ssh did a reverse lookup on that that IP-address
and got <Domain-Name>.  Then it did a regular lookup on <Domain-Name>
but got an IP-address different than the original IP-address.

OK, but what does mean practically?  This is ssh being paranoid -- which is
fine that's its job.  But if you were given an IP-address and told
that was where you could scp some files normally I would not worry about this
error.

The "fingerprint changed" error is more of a red flag.

Add a comment

Sign in to add a comment
Copyright © 2008-2017, dave - Code samples on Dave's Brain is licensed under the Creative Commons Attribution 2.5 License. However other material, including English text has all rights reserved.