Hello, Several systems on my network are attempting to connect via port 123 to servers in foreign countries. I’m attempting to determine if this is malicious traffic or expected behavior.
Will #.us.pool.ntp.org ever resolve to an NTP server outside of the US?
i.e. if I configure my system to use us.pool.ntp.org, may I then assume that system should no longer attempt to connect to foreign countries on port 123 - unless it has been compromised?