obtaining data traffic monitoring data, the data traffic monitoring data being in dependence on monitoring of traffic received by a virtual machine processing resource of a computing environment, wherein the method includes performing the monitoring of traffic and detecting in dependence on the monitoring of traffic that suspicious traffic has been received;

instantiating a virtual machine utility processing resource;

obtaining a state of the virtual machine processing resource and provisioning the virtual machine utility processing resource to include the state of the virtual machine processing resource so that the virtual machine utility processing resource and the virtual machine processing resource have a common state; and

configuring the computing environment to route data traffic to the virtual machine utility processing resource, wherein the configuring the computing environment to route data traffic to the virtual machine utility processing resource includes configuring the computing environment to route data from a certain client to the virtual machine utility processing resource, the certain client determined to be sending suspicious traffic, wherein the instantiating a virtual machine utility processing resource, the obtaining the state of the virtual machine processing resource, the provisioning the virtual machine utility processing resource to include the state of the virtual machine processing resource, and the configuring the computing environment to route data traffic to the virtual machine utility processing resource are performed in response to the detecting in dependence on the monitoring of traffic that suspicious traffic has been received.