I sampled 360 IPs from 12 VPS providers. Reverse DNS ranged from 0% to 100%, and the blocklist number needs unpacking.
After my last post on cloud provider IP ranges, a few people asked the obvious follow-up: fine, but which VPS provider should I actually buy from? Those are the names people agonise over when picking a $20 box.
Fair. So this round sampled the providers people actually compare — 12 of them, 30 IPs each, 360 total, same seed (20260928), reproducible.
For the provider → ASN mapping I didn't trust memory. Every row has evidence: The announced prefix came from each AS's actual BGP announcements via RIPEstat, sampled at /24 granularity. Every IP in the sample really is advertised by that AS — I verified 360/360 have a BGP origin ASN equal to the target. rDNS is a live PTR lookup, not a cache. Blocklist status is 8 public DNSBLs. RDAP gives the registrant and abuse contacts.
| Provider | PTR present | |---|---| | BandwagonHost | 30/30 | | DMIT | 29/30 | | Hetzner | 29/30 | | Contabo | 28/30 | | RackNerd | 25/30 | | OVH | 17/30 | | Vultr | 16/30 | | Linode | 14/30 | | DigitalOcean | 5/30 | | Oracle Cloud | 5/30 | | Tencent Cloud | 1/30 | | Alibaba Cloud | 0/30 |
Alibaba Cloud has zero PTR records across the entire sample. BandwagonHost has all 30. If you are planning to send email, that gap is the single most predictive number in this whole dataset — because a missing PTR is treated as a spam signal by most receivers, before any content check runs.
| Provider | Blocklist hits | |---|---| | Contabo | 0/30 | | BandwagonHost | 1/30 | | DigitalOcean | 1/30 | | Alibaba Cloud | 1/30 | | Linode | 1/30 | | Hetzner | 2/30 | | Vultr | 2/30 | | Oracle Cloud | 2/30 | | DMIT | 3/30 | | OVH | 3/30 | | Tencent Cloud | 6/30 | | RackNerd | 25/30 |
Here is the part that needs unpacking. Every single one of the 47 hits is on one list only. And 41 of the 47 — 87% — come from a single list: dnsbl.spfbl.net.
That matters because SPFBL is an aggressive, largely automated listing service with a low bar for inclusion. It is not the same signal as a Spamhaus listing. If I had reported only the headline "13.1% are blacklisted", a reader would picture something far worse than the underlying data supports.
And then there is RackNerd. 25 of 30 IPs listed, all on dnsbl.spfbl.net, spread across 25 different /24 blocks. When the hits scatter across many /24s like that, it is not a few dirty IPs — the whole network is being judged. Moving to another IP in the same range will not help you. At the other end, Contabo is 0/30.
Finding 3: the PTR name, the registrant, and the announcer can be three different companies
A RackNerd IP resolves to something ending quadranet.com. A Vultr IP resolves to constant.com. A handful of Oracle IPs point at unifiedlayer.com. Three names, three different companies.
The interesting ones are the third-party datacenter domains: quadranet.com shows up in RackNerd's sample and in Vultr's. Your reverse DNS can name a facility you have never heard of, run by a company you did not buy from — because the address space was assigned, reassigned, or sits inside a larger block someone else still administers.
RDAP tells you who is on record as holding the block. 235 of 360 — 65% — return no registrant organisation at all. Of the 125 that do return one, every one names the provider you bought from.
So the more common case is not misattribution, it is absence. Two thirds of VPS IPs have no registrant on record. If you have ever run an IP lookup and seen a blank organisation field, that is normal — not a broken query and not evidence the address is suspicious.
I had computed "share of IPs whose RDAP discloses an abuse role" and got a suspiciously high number. I rechecked ten of them with a strict test and the number collapsed. The gap: my first check was matching the string "abuse" anywhere in the RDAP payload — in remarks, in email addresses, in IRT reference names. It does not mean "an entity is labelled with the abuse role". The number was fabricated by my own parser, so the metric is gone.
I'm keeping this in the post because it's the fairest example of how this whole exercise can mislead you. Every other number here survived the same scrutiny; this one didn't.
What I did not measure A clean blocklist does not mean ChatGPT will load. AI services maintain their own IP reputation that public DNSBLs do not measure. That is a separate test. 30 IPs per provider is a sample of the ranges, not a census. A provider with a large network has far more space than 30 addresses can represent. Blocklists are dynamic. This snapshot is September 2026.