only realtime attack data