By default Mendix apps contain a robots.txt that prevents web crawlers from indexing your site. However if this robots.txt is changed to allow indexing then yes a session will be created.
Yes, any client that attempts to access your app without sending the proper session cookies (e.g. crawlers, scripts) will create a new session.