Hello, I am getting a weird referral for one of my sites. The link is alterahosting.com:2086/installsslmain and it has appeared more than once. I am using the referral script from littlegreenfootballs.com and my site is readordie.org

I'm not quite sure what to make of it. I recognize 2086, though. Isn't that like a WHM control panel? 2082 is CPanel itself, right? I don't know why I'm getting a referral from alterahosting, since that's obviously a webhosting company and my little site is just a fan anime site.

Anyone care to shed some light on this?

Yes, 2082 is cpanel, 2086 is WHM, and 2087 is the secure WHM.
If your script shows refferals, does it also show the entry page or what pages they are browsing?

The only thing I can see you have in common is NetDepot:
ReadorDie.org resolved to 216.180.225.82
IP Whois Results:
Connecting to whois.arin.net...
OrgName: Net Depot, Inc.
OrgID: DEPO
NetRange: 216.180.224.0 - 216.180.239.255
CIDR: 216.180.224.0/20
NetName: NETDEPOT97-1
NetHandle: NET-216-180-224-0-1
Parent: NET-216-0-0-0-0
NetType: Direct Allocation
NameServer: DNS1.DV2.NET
NameServer: ATLMAIL.DV2.NET
Comment: ADDRESSES WITHIN THIS BLOCK ARE NON-PORTABLE
----------
alterahosting.com resolved to 216.180.226.69
IP Whois Results: alterahosting.com
Connecting to whois.arin.net...
OrgName: Net Depot, Inc.
OrgID: DEPO
NetRange: 216.180.224.0 - 216.180.239.255
CIDR: 216.180.224.0/20
NetName: NETDEPOT97-1
NetHandle: NET-216-180-224-0-1
Parent: NET-216-0-0-0-0
NetType: Direct Allocation
NameServer: DNS1.DV2.NET
NameServer: ATLMAIL.DV2.NET
Comment: ADDRESSES WITHIN THIS BLOCK ARE NON-PORTABLE

I get referrals to my forum from a control panel 2 , Cpanel and whm mainly.
I think you will find the reason is that someone has been looking at webalizer on their control panel and seen a referal from your site. They then click on that and it shows up on your stats as their control panel referring them.

Hey, Lain was a good series :)

I say someone who works at alterahosting likes your site.

Probably one of the reasons above but something similar had me confused for a while where there were many similar referrer links in the webstats of all sites on the server.

It turned out to be this (http://forums.cpanel.net/read.php?TID=3633) :)

Thanks for the link Jim.
Request To Login
You are not logged in or you do not have permission to access this page. This could be due to one of several reasons:
You are not logged in. Fill in the form at the bottom of this page and try again, to register click here.
You can't recall what your password is. To reset it click here.
You are not allowed for this access, for more information please contact the forum administrator.

but I think Taz is right. I guess I didn't have enough coffee yet to think of it earlier.

well i just assumed thats what it was, i also get weird referrals from Yahoo mail and hotmail but i am guessing they are from the confirmation email that the forum sends out when you register

Originally posted by ATST
Thanks for the link Jim.


In case you can't view the link here it is:


HTTP_REFERER Report error
Hi,

I found that HTTP_REFERER in phpinfo() always return

https://server.com:2087/scripts/command

instead of prior visted site. Does cpanel do something before display the site? How can I correct it?



Answer

Bug submitted ... seems to default to whatever the referrer was when you used WHM to restart Apache. So if you restart Apache by typing https://your.server:2087/scripts/reshttpd (and not by clicking on a link) then the symptom goes away. Weird.