Also are all attempts being made off of the same network? E.g. Home network where a single router or network host is involved?

Also for the site in question, is it all https:, only as needed for the transfer of information intended to be encrypted (ENABLE_SSL set to true and HTTP_SERVER starting with http:) or only http: (ENABLE_SSL set to false and HTTP_SERVER starting with http:)?