This read-only counter tracks how many network objects (flows, sessions, or connections) are currently detected on a single host endpoint. The value increases when a host generates an abnormally high number of network objects, which may indicate a misconfiguration, DoS attack, or scanning activity. Operators monitor this metric to detect unusual host behavior and identify potential security issues or network anomalies in real-time.