A high volume of SYN flags without completing the three-way TCP handshake (SYN-ACK and ACK) is characteristic of reconnaissance activities, such as a TCP SYN scan. Attackers use SYN scans to map open and closed ports on a target system without fully establishing connections.
The lack of exploit signatures in the traffic supports the conclusion that this is reconnaissance rather than an active exploitation attempt.