Not a wordfence issue, which I realized after I turned my brain on and just disabled it to test the issue. Sorry for the post.
It doesn’t appear to be affecting the site, so my opinion is let it go till the next update, but it does make trouble shooting real other problems interesting. They tend to scroll off before you can look for them 🙂
These lines are in the “Seamless Donations – Log”, the apache logs, (access and error) don’t show ANY of these connections, so its not coming from someone outside the system. They only contain the IPN transaction entries, no others.
BUT, gets stranger, at 5:12am it just stopped, then at 12:53pm it started again. I don’t know what happened at 5:12, but at 12:53 I logged into the wp-admin pages to look at the log again, and apparently triggered it back to activity.
That help at all?