There should be no limit. However, Apache, rereads the .htaccess file each time the directory is accessed, which may impact your website's performance. If your host allows, I'd recommend placing the IP ban list into the server configuration so that Apache doesn't have to reload and reprocess the list for every request.