In last 24 hours i get 1800 bot fight mod and 1000 managed challenge custom rule

Hi, in the last week i see in cloudflare security > events , that there
a 1000+ bot fight mod managed challenge from diffrents countires and also
1500+ custom rule managed challenges .
in my WAF i have add two records , one is Challenge Bot Score 2 - 29 and second is
Block Bot Score = 1.
and also i enabled bot fight mode in security cloudflare.

why still my server have huge load average?
Could it be that they managed to bypass the Firewall rules and the bot fight mode?