Service: Bacula-dir Port: 9101 ?

[m]

> Is my box hacked, or is everything in order?
> It looks very very weird to me, anyway, that "wsip-70-169-134-190.hr.hr.cox.net" is connecting to Bacula-dir.
> 
> Source: 10.137.186.251
> Destination: wsip-70-169-134-190.hr.hr.cox.net
> Port: 9101
> Service: Bacula-dir
> Program: tor
> 
> Installed Version
> 0.1.2.17-1~dapper
> 
> #ControlPort 9051 (commented/disabled)

Are you running anything at that port? Try "netstat -ln |grep 9101".

You could also try running "grep -R 9101 /etc/*" to see if 9101 is 
mentioned in any config under the /etc.

M