In an operation 200, the communication lines 112, 122, 132, 142 are monitored in real-time to identify data packets associated with known harmful computer codes, preselected identifying information, or other identifying information that correspond to an attack on target system 105.