My list is a growning network of non-NPC and unknown-if-NPC IPs, mostly newish players.
Yeah, I keep making more detailed notes about IPs as I go along. My network isn't huge, but I've got a huge list of known IPs (my list of 25 unchecked IPs got condensed yesterday down to about 3 good ones and 6 I didn't get to after trimming out 2 duplicates and 4 known NPCs). If I had more time in the mornings I'd toss viri on the NPCs for cash accumulation during the day, as they reset only two hours after I got to bed (making evening infection pointless).
Anyway, my Excel sheet notes consist of an alphabetized list of IP addresses with passwords (blank for ones that have fallen off my slaves list), in horizontally adjacent cells I list important software. If the IP has a firewall I can't get past I put "(firewall)" and the rating of my current waterwall in the password column, so
(firewall 0.9+). NPCs I've highlighted in a faint yellow.
To-be-investigated IPs are in a second list, sorted and trimmed of duplicates and known IPs.
I have a third list for the IPs that DDoS'd 127.0.0.1, which I have good reason to assume are equally well protected and known that their firewall is
at least rating 1.0 (as I can't break in). So when I upgrade waterwalls I hit the first in that list and treat the entire block as the same hackability.
I have a fourth list of bank account #s which I take 2 cracks at once a day (not willing to waste too much time breaking in).
In a fifth list I've been writing down the clues to the "plot" NPCs, I'm stuck on 3 of the addresses, the math one (#2 and #3) and the "I have one server at:" one.