TCP Sync Flood Attack

Oh… forgot about the RRC attempts. Should be lower as well.
One question though…
The number of active users will be limited to the Basebands, right? Not the available PRB.
Having active users using resources only for small amounts of data, we will hit the max number of active RRC users limited by the baseband/lincense, before you start seeing congestion on of your PRB resources, right?
User data traffic, PRB utilisation, DL speeds and number of RRC users, to draw a profile of how resources are being used (on average and per user) for each individual cell

Is this site specific impact?

No, it’s whole network.

Here it is with traffic, no traffic changed.

Nice explanation:

What is a DDoS attack?

https://www.cloudflare.com/learning/ddos/what-is-a-ddos-attack/