So, to find the last five IP’s a user called “user” has logged in as, do this from .. well, a commandline.

last -i | grep user | head -n 5

Last shows the last (lots) of users that logged in, the -i shows IP’s, then you use grep to filter by the word “user” and use head show the top five. Yay, all done.