SSH - "REMOTE HOST IDENTIFICATION HAS CHANGED"

The first time you try to connect to a newly-rebuilt Cloud Server, you
might receive a message similar to the following one:

@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
@    WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED!     @
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
IT IS POSSIBLE THAT SOMEONE IS DOING SOMETHING NASTY!
Someone could be eavesdropping on you right now (man-in-the-middle attack)!
It is also possible that the RSA host key has just been changed.
The fingerprint for the RSA key sent by the remote host is
xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx.
Please contact your system administrator.
Add correct host key in /home/scott/.ssh/known_hosts to get rid of this message.
Offending key in /home/scott/.ssh/known_hosts:15
RSA host key for 1.2.3.4 has changed and you have requested strict checking.
Host key verification failed.

Although the message might be alarming, there is no attack occurring.
The RSA key on your Cloud Server was changed when you rebuilt it, and your SSH client is warning you that the discrepancy might be the fault of an attacker.

Important: If you see this message at any other time, you should not enter your credentials
and should investigate further.

To prevent the message from occurring again, reset the known host key.

Review the following lines of information in your SSH file:

Offending key in /home/scott/.ssh/known_hosts:15
RSA host key for 1.2.3.4 has changed...

The first line provides the file name and the line number of the old
key.

Use one of the following methods to change to the new RSA host key:

• Open the .ssh/known_hosts file in your text editor and delete line 15.

  or

• Run the following Linux command, replacing the IP and path name as appropriate.

  sed -i '/1.2.3.4/d' /home/scott/.ssh/known_hosts
  

The next time you attempt to log in, SSH should tell you that the host
key is unknown and ask if you want to connect and save the new key.

For more information about the SSH key and its security implications,
see this article about checking the SSH key via the web
console.