Which threat-detection feature is used to keep track of suspected attackers who create connections to too many hosts or ports?

{} [+]