Configuring virtual hosts; Need to just allow one ip address to access the website and deny all. What's wrong with the below code?

<VirtualHost *:80>
    ServerAdmin example.com
    DocumentRoot "C:/xampp/htdocs/example.com"
    ServerName www.example.com
    ServerAlias example.com
    ErrorLog "logs/example.com-error.log"
    CustomLog "logs/example.com-access.log" common


  
     <Directory "C:/xampp/htdocs/example.com">
    
            Options All -Indexes 
            AllowOverride All



 <RequireAll>
    
    Require all denied
    Require ip 49.204.11.24
    
    </RequireAll>
            

    </Directory>
   </VirtualHost>

Assuming you are using Apache 2.4, your syntax is correct. Just check your loaded modules and make sure that you have loaded the authz_core module.

To check the module is loaded use:

apache2ctl -M

Since my assumption is this webserver might have some other websites that may be needed to be visible by others, thus it's best to apply this restriction at the virtual hosts level and not globally.

<VirtualHost *:80>
        
        ServerName www.example.com
        ServerAdmin webmaster@localhost
        DocumentRoot /var/www/html

        ErrorLog ${APACHE_LOG_DIR}/error.log
        CustomLog ${APACHE_LOG_DIR}/access.log combined

        <Location />
        Require ip 172.20.131.34
        </Location>
</VirtualHost>

So by the above configuration, only 172.20.131.34 as source ip, is able to view my page, and others will get the Forbidden message while accessing the page.