Block access to all vhosts / shared vhosts command

"Order Deny,Allow" is wrong for your case with the included clauses. With Deny,Allow you first specify the denied origins (the deny clause) and then the exceptions from that rule (the allowed clause). The IP address which you wish to block matches both clauses. So you first deny the IP and then allow it back.

You must do it the opposite way - Order Allow,Deny, so you define firstly what is allowed (allow from all - everything is allowed) and then add a deny clause which is the exception from that rule (you block the specific IP).

Briefly - your rule must be:

Order Allow,Deny
Deny from 1.1.1.1
Allow from all

Order Deny,Allow
Deny from 1.1.1.1

Most people prefer the first variant - I guess they feel safer when they see "allow from all" explicitly.