My geoIP lock in my .htaccess is penetrable

Question

Apache 2.4.38

In my .htaccess I have these lines, too:

    GeoIPEnable On
    SetEnvIf GEOIP_COUNTRY_CODE CN BlockCountry