Domain > versioncheck.graylog.com

More information on this domain is in AlienVault OTX

Whois

Property	Value
Email	lennart@torch.sh
NameServer	NS2.DNSIMPLE.COM
Created	2011-09-06 00:00:00
Changed	2014-11-12 00:00:00
Expires	2015-09-06 00:00:00
Registrar	THENAMECO LLC

DNS Resolutions

Date	IP Address
2025-06-03	172.66.43.195 (ClassC)
2026-02-19	172.66.40.61 (ClassC)

HTTP/1.1 200 OKDate: Sun, 20 Oct 2024 13:21:49 GMTContent-Type: text/htmlTransfer-Encoding: chunkedConnection: keep-aliveReport-To: {group:heroku-nel,max_age:3600,endpoints:{url:https://nel.heroku.com

!DOCTYPE html>html langen>head>meta charsetutf-8>meta http-equivX-UA-Compatible contentIEedge>meta nameviewport contentwidthdevice-width, initial-scale1>meta namerobots contentnoindex,nofollow,noarchive,nosnippet />title>Graylog Version Check/title>link relstylesheet href//maxcdn.bootstrapcdn.com/bootstrap/3.3.2/css/bootstrap.min.css>link relstylesheet href//maxcdn.bootstrapcdn.com/font-awesome/4.3.0/css/font-awesome.min.css>!--if lt IE 9>    script srchttps://oss.maxcdn.com/html5shiv/3.7.2/html5shiv.min.js>/script>    script srchttps://oss.maxcdn.com/respond/1.4.2/respond.min.js>/script>    !endif-->/head>body>div classjumbotron>div classcontainer>a hrefhttps://www.graylog.org/>img src/images/logo.png />/a>/div>/div>div classcontainer>div classrow>div classcol-md-12>p>This is the Graylog version check API./p>p>You probably arrived here because youve seen one of your Graylog nodes performing HTTP GET requests against this host./p>p>You can turn off these version checks with the following setting in your Graylog configuration file:/p>p>code>versionchecks  false/code>/p>/div>/div>hr>footer>p>© 2016-2017 a hrefhttps://www.graylog.org/>Graylog, Inc./a>/p>/footer>/div>/body>/html>

Subdomains

Date	Domain	IP
wdash.graylog.com	2023-08-26	172.66.40.61
api.graylog.com	2025-08-13	172.66.43.195
versioncheck.graylog.com	2025-06-03	172.66.43.195
go.graylog.com	2024-11-22	3.163.24.45
www.graylog.com	2025-06-03	172.66.40.61

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > versioncheck.graylog.com

Is this malicious?

Whois

DNS Resolutions

Port 80

Port 443

Subdomains