TornadoRoad46

One more question, why were inbound connections coming from port 25565 only? I would think they would come from port 25565 and 25566 since they are both Java Minecraft servers.

I use a program called Chrome Remote Desktop as I do not have an extra monitor on hand. Thank you for the information!

That would be correct

We can play the servers just fine with no lag, never have had a connectivity problem.

Here is the log file: mbst-grab-results.zip

I have two (private) Minecraft servers, one on port 25565 and one on port 25566. They run 24/7. I recently installed malwarebytes on the machine and have been getting a lot of RTP detections out of nowhere. I reset windows and they still come in. The only thing installed on the computer is Geforce Experience, Java, Malwarebytes, and Chrome. All the RTP detections come from the port 25565 ONLY. It seems like something is trying to attack one of my minecraft servers? This machine for sure has no virus and has been scanned multiple times. After looking up the IP's, they seem to be coming from datacenters? Those include Akamai Technologies, DoD Network Information, Doval Manuel Angel, OVH SAS, and DigitalOcean LLC. The RTP detection comes at random times, heres an example. 1 detection at 3:31 and 1 detection at 3:32.....1 detection at 3:43 and 1 detection at 3:44...etc. I will provide some logs, but please note that I dont have all the detections logs because I reset Windows recently. This is also NOT my main machine. 4.txt 3.txt 2.txt 1.txt