Thanks so much Dave!
Do you agree that this behavior – “In Word Fence’s list of recently blocked attacks, it shows our own server’s IP as where the attack came from” is not correct?
The “How does wordfenceget IP’s” is showing my IP address correctly, and it’s set to the recommended setting. I don’t see that our server’s IP is blocked on firewall -> blocked. I don’t see anything wrong with the configuration here. Thanks