nsoftware.com

[TorontoBoy]

UA: /n software IPWorks HTTP/S Component - www.nsoftware.com
Protocol: HTTP/1.1
Robots.txt: No
Host: 183.0.0.0 - 183.63.255.255
183.0.0.0/10
netname: CHINANET-GD
descr: CHINANET Guangdong province

183.16.205.13* [26/Sep/2018:00:36:47 GET / HTTP/1.1 403 637 - /n software IPWorks HTTP/S Component - www.nsoftware.com

The UA "/n" means I give it an automatic 403. The request was 3 hits of the above in a row. These Chinese bots usually masquerade as legit browsers, so I'm a little surprised they even have a UA. Website says their corporate headquarters is Chapel Hill, NC, but the bot is coming from a Chinese IP address? Maybe the UA is spoofed?

Headers:

2018-09-26:00:36:47
URL: /
IP: 183.16.205.13*
Accept: text/html
Accept-Charset: UTF-8
Host: dontai.com
User-Agent: /n software IPWorks HTTP/S Component - www.nsoftware.com

[keyplyr]

...but the bot is coming from a Chinese IP address

So headquarters is in US, with servers in China. Not uncommon.