After each successful authentication, keep a record of the user, the IP, and the time the authentication happened.