I'm trying to track the last time a user logged into a Linux server with a certain key. So user
secure has 5 keys in
~/.ssh/authorized_keys, how can I track when each key was used and what IP was used to access the server?
Ideally I would be able to see that Key 1 was last used 5 days ago from 127.0.0.1, Key 2 was used 10 mins ago from 10.0.0.5, Key 3 and 4 were never used, Key 5 was used 2 weeks ago from 126.96.36.199.