Hi,
Totally agree with Narayan (nice catch Narayan), NLB is probably sending it out on multiple ports from the server, or from multiple servers in a cluster, turning the service off if it is not used is the easy solution, if not an option then you'll need to search for a workaround from Microsoft side, and i believe that this issue was discussed and a workaround is available from Microsoft side.