Graylog (on Debian Jessie) appears to be connecting to 22.214.171.124 which appears to be Amazon AWS in Ireland. Anonymous usage statistics are turned off. It may also be trying to connect to 126.96.36.199 which also appears to be AWS in Ireland. Connection is definitely from the Graylog process.
What information is it trying to send and is it possible to turn this off?