at the control panel it doesnt filter guest visitors with same IP and multiple started sessions, that's why in ACP it always shows more online visitors then on home page.
For example a search bot can visit your site according the links from their cached pages, which have sessionid from previous visits, so every move they make could possible create a new session, which then will be showed as a separate visitor at ACP.
