Suggestions:
If Your Site Is HackedTuning Wordfence Resource UsageV3: Accessing and Consuming the Vulnerability Data FeedAPI CallbacksVulnerability Management: Webhook NotificationsBasic Plugin SettingsAudit LogV1: Accessing and Consuming the Vulnerability Data FeedV2: Accessing and Consuming the Vulnerability Data FeedWordfence IntelligenceCompatibilityWordfence Intelligence Webhook NotificationsWordfence ResponseWordfence CareWordfence FreePlugin / Theme ConflictsUsing Wordfence Central TeamsSub-Processors ListMySQLi storage engineAccount and Billing HistoryUsing Central’s Settings pageLogin Security PluginLogin Security OptionsLegacy Two-Factor AuthenticationUsing Wordfence plugin options TemplatesUsing the Configuration pageViewing scan FindingsUsing the Dashboard pageSetting up two-factor authenticationConnecting your sites to Wordfence CentralWordfence Central ToolImport/ExportWordfence and GDPR – General Data Protection RegulationTroubleshootingTechnical DetailsWordfence 7Blocking TroubleshootingWordfence and LiteSpeedDiagnosticsWHOIS LookupBrute Force ProtectionStatisticsGlobal OptionsWordfence APIAlertsDashboardToolsRate LimitingChangelogScan TroubleshootingFirewall Optimization TroubleshootingScan ResultsConstantsTroubleshootingLicense KeyRemove or ResetSystem requirementsScan SchedulingCountry BlockingScan OptionsFirewall OptionsFirewall Learning ModeAdvanced information and configurationIncident Response ServicesTwo-Factor AuthenticationReal-Time Live TrafficScanBlockingWordfence PremiumOptimizing The FirewallWordfence Web Application Firewall (WAF)

API Callbacks

Learn how to identify callbacks made from Wordfence servers to your site.

Identifying Callbacks from Wordfence Servers

The Wordfence plugin mostly uses API calls initiated by your site that reach the Wordfence servers. A few of these API calls require callbacks to your site from our servers. These calls are used for features such as checking your IP address detection settings to (detectProxy will appear in the URL), or for starting scans if your site cannot make connections to itself directly. The optional Wordfence Central connection is also used periodically for syncing settings or other Wordfence Central features.

These API calls can be identified in your access logs by the IP addresses of outbound.wordfence.com, and the User Agent strings:

  • Wordfence API/1.0 (+https://www.wordfence.com/help/api-callbacks/)
  • Wordfence Central API v1.0

Additional details can be found on the Advanced information and configuration page.