I assume the "redacted" IP address is that of your printer; 9100 is a common well-known HP printer port. Other than "User-Agent: libwww-perl/6.15", is there any other information as to the remote host that's making the connection to your printer? You could always put a packet capture on the wire, to find the source, trace it down and SHUT it down!