A diary-reader, Ned, reports a spike in UDP/4081 activity.  The reported source is located in China.  He did not have any captured packets, just firewall logs.  I'm 95% certain that this is messenger/pop-up spam.  I'd like to task the informal network Echelon system we have (in the form of our readers) to see if anyone can confirm this guess with a captured packet.

UPDATE: Florin has provided a capture from 09-NOV-2006 and from today confirming the Spam theory.  Thanks!