Interesting to checkout the real time connection screen:
One S3 is sending (UDP?) packets to:
tock9.usshc.com:123
ntp1.linuxhosted.ca:123
209.118.204.201:123
hydrogen.constant.com:123
Does any of this make sense?
Those are all port 123 which is NTP. How often is it contacting those addresses?