What's this IP?

[Mr Kain]

I used to not get this firewall connection query but now any time I start up my new installation of RPG Maker XP, the following IP tries to connect to the internet.

168.0.255:138

^What is it? Is it safe? Is it RPG Maker checking for RGSS*.dll updates now or something? Is it some sort of DRM online reverification process? I'm just curious so I'll know whether to put it on my trusted list or not. I recieved this particular install from a staffer via support E-Mail when my old information was incompatable with the new DRM scheme (either from Kain Vinosec or Nathanial B, I'd have to look again.)

Thank you for any information you can provide, google and bing don't seem to have much on this address and I've already looked it up on a couple whois domains. If there is something malicious about it, I'd especially like to know so we can warn others and find a way to prevent it in future installs.

 

[EternalShadow]

Is it yours?

 

[Mr Kain]

No.

 

[Andar]

I used to not get this firewall connection query but now any time I start up my new installation of RPG Maker XP, the following IP tries to connect to the internet.

Either you misspelled/miswrote that sentence, or you got something else wrong.
If your firewall really says that this IP tries to connect to the internet, then that IP is one of your devices. Because everything the firewall blocks from connecting to the internet is on your own side of the firewall, and thereby one of your own devices.


It might be a networking printer, it might be your phone on wireless connection, it might be an additional network adapter inside your computer or several other things that aren't directly visible, but if it tries to connect to the internet and the firewall blocks it, then it's yours, and IPs are always devices in some form or another.


Only if your firewall says something is trying to connect to IP xy, then that IP is part of the internet and outside of your own network.


Please check and state the exact message, or if that was the correct message try to find which one of your devices it is...

 

[cabfe]

A quick search on the internet seems to pinpoint this IP address to a place in Montevideo, Uruguay.

 

[Xypher]

fairly sure there should be a 192. in front of that address which means its a local address with 138 being the port.

 

[ShinGamix]

Did you buy RPG Maker XP?

 

[cabfe]

fairly sure there should be a 192. in front of that address which means its a local address with 138 being the port.

Most probably.

I assumed the colon was a mistyped dot, but it's more logical to actually be 192.168.0.255:138

In that case, it's certainly an emitting IP address and the OP's own computer/device.

 

[Mr Kain]

Yeah I'm an oldschool XP vet, I bought it in 2006, this is my 3rd install. They got my old order, serial and activation key and gave me my new activation key!

Since the last time I clicked Block, it's not popping up anymore when I close then open RPG Maker but it could possibly have a 192 at the start. It's not a major alarm or anything, just a mere curiosity. Device from the OS? Why would it always make a connection request when RPG Maker starts? That's my question for the day.

I'll restart and see if it'll give me the IP again so I can confirm whatever it was.

 

[cabfe]

Port 138 is a Netbios port, used by Windows to communicate some infos in a local network.

If this is really the case, then it's harmless and can't even reach the internet, so no hacking here.

 

[Tsukihime]

They do online activation which requires something to connect to their servers. That's probably where it's coming from.