Blocking IPs
 

i need to block some aggressive IPs .. i have seen how to do it on htaccess but is there any other ways or is this it?

use MaxMind.com to find all the IPs and geo target them to where you need.

these where going to a clients paysite... keep trying to access var/log/secure/ so the host suggest i block them out.. they are coming in from brazil

sounds like you need a new host, they should do it for you

order allow,deny
allow from all
deny from ip.address.goes.here