I have the latest wordperss. After I installed and activated this plugin i block all the countries (yes it shows my country whitelisted). I'm not living in USA. Then I clear web browser cache and data. Then, I use use a VPN (Hotspot Shield) connection and use USA IP. But still I can login to my site admin area and wp-login.php page using that VPN connection.
Why is that? I have Apache+Nginx VPS with cloudflare and wordfence.