The top documents tagged [attacker ip address]