Possible DDoS botnet high-volume outbound SYN flood burst concentrated on single destination

Duo Tech@duotech

•updated Jul 27, 2026•1•0•6

Detects high-volume outbound SYN packet bursts from internal hosts to external networks, excluding known service ports. This behavior is indicative of a compromised host acting as part of a botnet conducting a SYN flood Denial of Service attack.