I don't suppose we shall ever know the answer to this but how much/many determines too many clicks?
Once again yesterday I saw USD 10+ deducted because a US visitor was determined invalid. So how does Google "know" they were invalid? Simply because one visitor clicked on every ad? Does that make 10 clicks invalid especially when I can see which site and pages they've been on and from which IP they've come?
To me that's not click bombing, that could be a genuine visitor, maybe, just maybe they're searching for a supplier in their area and all the ads were way out of their region...no wonder my earnings are down.