Ahhh! I understand now. :)
Basically, it's just how the Wordfence plugin grabs the update for you. Its a scheduled job on your local machine so that's why you see the ip/localhost thing. We'll take a look at changing that notification in the future to remove the confusion.
tim