CheckHostIP

CheckHostIP
If this flag is set to yes, ssh(1) will additionally check the host IP address in the known_hosts file. This allows ssh to detect if a host key changed due to DNS spoofing. 
If the option is set to no, the check will not be executed. The default is yes until OpenSSH 8.5 (2021)

ssh 8.5 disable CheckHostIP by default.

Related options

• StrictHostKeyChecking

See also

• OpenSSH (changelog): /etc/ssh/sshd_config | /etc/ssh/ssh_config | ~/.ssh/ | openSSL | sshd logs | sftp | scp | authorized_keys | ssh-keygen | ssh-keyscan | ssh-add | ssh-agent | ssh | Ssh -O stop | ssh-copy-id | CheckHostIP | UseKeychain, OpenSSF