Is my box hacked, or is everything in order? It looks very very weird to me, anyway, that "wsip-70-169-134-190.hr.hr.cox.net" is connecting to Bacula-dir. Source: 10.137.186.251 Destination: wsip-70-169-134-190.hr.hr.cox.net Port: 9101 Service: Bacula-dir Program: tor Installed Version 0.1.2.17-1~dapper #ControlPort 9051 (commented/disabled)
Are you running anything at that port? Try "netstat -ln |grep 9101".You could also try running "grep -R 9101 /etc/*" to see if 9101 is mentioned in any config under the /etc.
M