I got the solution from this article
alterchange the line
allow from 192.168.0.0-255 to
allow from 192.168.0.2/255.255.0.0
will lock Apache down to my internal LAN i.e. address range 192.168.0.2 to 192.168.0.255 only with subnet mask of 255.255.0.0
and it works with GET also, here is my final .htaccess
<Limit GET POST PUT DELETE> Order deny,allow Deny from all Allow from 127.0.0.1 ::1 Allow from 192.168.0.2/255.255.0.0 </Limit>