OK thanks. My main problem (other than the cause) is that in order to get more information I need them to start the server again. The last time they started it, their firewall became saturated and prevented other essential network activity from taking place. I need to discuss with them the best approach.

Question: If I artificially set the maximum sessions to 1 (for example) would that explain the fact that the number of connections exceeds the number of sessions? Would the excess connections just be other clients being unable to create a session?

Is there a way to restrict the number of connections (as opposed to sessions)?
Is there a way to restrict the connections to certain IP ranges? This is exposed on the internet, but we may need to restrict it to known clients to get closer to the truth.