What data does Wordfence send to the scanning servers during scans?
From Wordfence Documentation
All data is sent to our servers using a secure SSL connection. The following data is sent when a scan occurs:
- MD5 and SHA hashes of your files and the filenames.
- Integers representing URLs on your site to scan against a list of known dangerous URLs.
- If the option to participate in the Wordfence security network is selected in your options, we send IP addresses (as integers) that have violated your firewall or login rules. These are compared against rule-breakers on other sites and may be included in a list of dangerous IPs that we distribute to you and other sites to watch out for, if we determine there is a pattern of an IP address behaving maliciously.