Quote:
Hm.. i have the Clones one.. but this isnt Clone ! alot of BOTs join at Once with many diff ISP(S)

The flood routine I suggested has nothing to do with ISP's, but can count the number of joins per period (or the number of lines per period in your querywindow, etc). Call it in an on JOIN event with: if ($isflood(joinflood, 5, 4)) { .. actions if 5 or more joins in 4 seconds happen .. }
Maybe you have to play with the parameters, try 5,3 5,6 4,4
Good luck