• Resolved omtr

    (@omtr)


    Hi, i know that there is a Data Processing Agreement available from Defiant, but i wonder if Wordfence free does send any private Data to Defiant, for example IP-Addresses that are blocked by the Firewall because of unsuccessful login attempts. As far as i unterstand, this shouldn’t be the case if the plugin is not connected to Wordfence Central. Also the alert messages that are created by Wordfence are sent directly from the WordPress installation and are not routed via Wordfence.
    Do you agree?

Viewing 3 replies - 1 through 3 (of 3 total)
  • Hey @omtr,

    I’ve just spoken with the developers about this.

    If the IP(s) are blocked by the Firewall or Brute Force Protection we do stare the IPs for a period of time.

    If it’s blocked by the plugin locally on your end such as manually blocking an IP, breaking a Rate Limiting Rule, and etc, we do not collect those.

    Please let me know if you have any other questions.

    Thanks,

    Gerroald

    Do they filter out domain server/host ips from false positive scenarios like in my post? ??

    • This reply was modified 4 years, 9 months ago by xxjergerxx.

    Hi,

    If your website has “Participate in the real-time Wordfence security network” (in Wordfence -> All Options), then yes, some IP addresses will be shared with Defiant, regardless if your site is registered with Central.

    https://www.wordfence.com/help/firewall/brute-force/

    Look at the last paragraph, note that you can simply disable this setting and no information will be shared with Defiant. However, this does mean your website is will not receive the IP list of attackers on other websites that have Wordfence installed.

    Dave

Viewing 3 replies - 1 through 3 (of 3 total)
  • The topic ‘Does the plugin send any data to Defiant?’ is closed to new replies.