Turns out System Center Operations Manager Agent was running HealthService.exe as Local System

and firing up those 1600 connections every 15 minutes.

Here is the reference to that forum that helped....