What is ip-audit.js in your X archive?
ip-audit.js lists logins to your account: the date and time of each and the IP address it came from. It is the archive's record of where your account was accessed.
How to open it
It is a text file in the archive’s data folder. Open it in any text editor; delete the first line’s window.YTD... = prefix and the rest is plain JSON any JSON tool can read. Our free viewer does not read this file yet; it covers likes, bookmarks and your own posts.
Fields in ip-audit.js
| Field | What it means |
|---|---|
| accountId | Your account ID. |
| createdAt | Date and time of the login. |
| loginIp | IP address the login came from. |
What it is useful for
- Spotting logins from places or networks that were not you.
- Checking whether a security incident touched your account.
What to watch out for
- IP addresses map to locations only roughly; mobile networks and VPNs often show distant cities.
- If you find a login that was not you, change your password and review connected apps.
Related files
- account.js : Account details
Field names come from the README.txt X includes in every archive. X changes the archive from time to time, so check the README in your own download if something differs. See every file in the archive.