Logs from 94.152.11.49 - is this false positive?

Hello!
Sorry if this issue has been already addressed on the forum but I can't find any thread regarding the problem.
I'm getting security logs from IP 94.152.11.49 and Securitycheck component is marked. The description begins with" {"cipher":2,"body":{"status":200,"data": ...... (see attached screen)
On this particular domain both SP and SP Control Center are installed.
Does it come from SP? Is this false positive? Should I put the IP in the whitelist?

Regards -
Simon