The top documents tagged [attacker ip]