> Which either means

or, it means the otherwise previously trusted server has been compromised, and the sshd has been replaced with a malicious one.