The most likely (to me) is that they have only one external IP and they were already using it on IIS.
Definitrely.
It has probably morphed over time into something no one would have designed from the ground up.
Maybe it's time to tear it all down and rebuild it... better.