Enable web server logs and track the Referer HTTP header for all requests to your software package.
Of course, this will only help track sites that directly link to your site. There is no easy way to track websites that reflect your package and allow users to download it from the mirror.
source share