/silence list is limited to 10, on my network anyway, and is useless unless all clones have an identical user ID. A better option, if your server software supports it is /umode +m as it stops private messages at server level. You would only need to have this on fairly briefly as you'd then have time to manually block the attack while not feeling the affects of it.