I enabled the under attack mode to protect my website and rule but it didn’t work my website still down I checked in events in events it’s said that it’s blocked bot my website down
Your screenshot only shows requests/attacks that were successfully blocked. Are there suspicious requests that were not mitigated? That should be the more interesting data.
Also, are you protecting your origin server, allowing only Cloudflare IPs to connect? If not, the attack could be hitting the server via IP directly, bypassing Cloudflare completely.
And is this origin firewall directly on the server (perhaps even the application itself)? or an external one (perhaps a cloud/perimeter firewall provided by your host)? If this is a local firewall, the server could get busy just mitigating the attack (if the attack is sufficiently large).
“Origin” refers to your hosting server, not Cloudflare.
So this is something you’d do at your hosting provider’s end – in your hosting control panel (ideally) or directly on your server if your host doesn’t provide any central firewall.
For what it’s worth, I can access your website all right.