Suspicious NTPD Connection
NTPd can be configured to get time from any host. Notably many use http://www.pool.ntp.org

That IP is running a ntp server with accurate time; and a http server, the page is mostly invalid HTML with Google Ads. It doesn't look terribly nefarious, so I'd guess that something else is going on here. Check your configuration and see if it's set to use that IP (or a hostname other than time.apple.com). 

Update:
Checked pool.ntp.org, and ntp.syari.net (94.23.243.53) is a member. Your computer must be set to use the pool. You should update your configuration to use pool members from the US (use 0.us.pool.ntp.org for example).