Hacker News Reader

They only need to request your site once, to get the ads that are served, then they can "click" them without visiting your site.

So like copying the ad embed code and pasting it in an HTML and the somehow spoofing the ip address?

I'd guess you would only have to spoof the REFERER.

But I might be wrong.