londrum - 12:41 pm on Jun 28, 2011 (gmt 0)
you say these are suspect -- static.reverse.softlayer.com, host.degaa.net, host2.degaa.net, reverse.ezzi.net
but what's suspect about them? as far as i can tell they are just webhosts and data tracking services. i would imagine that its perfectly normal for a click to originate from any of them.
as for someone clicking an ad 6 times in 10 minutes, sure, its weird, but its hardly out of the ordinary. all it means is that someone has clicked your ad and then backtracked to the original site a few times. there could be a perfectly reasonable explanation for that.
eg. if your landing page is selling "red widgets" and your advert appeared on a site that gives info about all the different kinds of widgets, then the user may simply be browsing for info... they read some info on the site, then click your ad. your landing page doesnt have the info they need so they return to the old site to get more info, then click your ad again...
or, even more likely... maybe your ad appeared at the top of the serps. the user is window shopping so he clicks your ad, then goes back to the serps and visits a site further down the serps. he wants to compare that widget's details to the ones on your site, so he clicks your ad again, then he goes back to the next site down the SERPS, and repeats what he did before.
that would seem like a perfectly normal bit of user behaviour.