To expand slightly: requests coming into the IP address will be handled by the first
VirtualHost configured. This is probably "000-default" serving out of
/var/www/html. Try running
a2dissite 000-default to disable it.
Note that the first enabled site configuration, sorted by the configuration file name, will be the one that responds to requests coming to the bare IP address. If multiple sites are on the same server, I usually name them "001-primarysite.org," "002-secondarysite.org," etc. so that the main site will be the one that people land on in such a case.