>I already contacted the ShareIt service, hard to say how fast they can respond.
>
>Actually I have noticed those guys couple days before, they were scanning my web site with script or downloader. They were jumping from one IP address to another pretty fast, I practically could not keep pace to add those addresses to "black log" :)

Well, I think you have your answer there. Move it up to the firewall.