Back to website

AgentStatus by Carmel Labs · April 2026

Your Synthetic Monitor Can't Reach
64% of AI Agents

We tested 6,228 production AI agents from both datacenter and residential IPs using the same prompts. The gap that survives scrutiny is reachability: cloud synthetics often hit the bot wall; residential probes more often reach the product. Same-reachability gold is nearly tied — do not dress access as correctness.

1,553,000+
Datacenter validations
4,850,000+
Residential validations
6,228
Agents compared
3,995 (64%)
Agents unreachable from datacenter
agentstatus
agentstatus.dev | April 2026

The Study

We tested 6,228 agents from both datacenter and residential IPs.

We ran 1.55 million tests from datacenter IPs and 4.85 million tests from residential consumer devices against the same pool of production AI agents. The datacenter validations used the same IP ranges as Datadog Synthetics, Pingdom, UptimeRobot, and every other traditional monitoring tool. The residential validations came from real consumer devices on home networks across 26 regions.

Both groups used the same evaluation prompts and the same scoring pipeline. Each test produces a transport outcome (reached vs blocked/throttled/empty) and, when a response body exists, can be scored for answer quality. The causal variable this study isolates is network origin. The headline findings are about access asymmetry. Same-reachability gold rates are nearly tied; do not read access failure as origin-caused correctness.

1.55M
Datacenter tests from cloud infrastructure IPs
4.85M
Residential tests from real consumer devices
6,228
Production AI agents tested by both groups

Finding 1

Most AI agents refuse to talk to datacenter IPs.

The most important metric is the rejection rate: how often does the agent see the incoming request and refuse to respond? From a datacenter IP, agents rejected 74.2% of all tests. From a residential IP, that number drops to 22.6%.

The majority of monitoring traffic from datacenter IPs gets rejected before it ever reaches the agent.

Same agents. Different network path.

Datacenter monitors hit the wall most agents put up for cloud IPs.

Datacenter path
74.2%
of requests rejected
67.3%
throttled for sending too many requests
1.2%
fully working (composite; access-dominated)

Outcome

Synthetic “up” is mostly an allowlist illusion.

The majority of monitoring traffic from datacenter IPs gets rejected before it ever reaches the agent.

Residential observers take the inbound path customers actually use.

Residential path
22.6%
of requests rejected
15.8%
throttled for sending too many requests
3.1%
fully working (composite; access-dominated)

Outcome

Reachability is path-dependent.

From a residential IP, rejection drops sharply — because the request looks like a user, not a cloud probe.

64%

of agents block datacenter but allow residential through

3,995 out of 6,228 agents rejected more than half of datacenter requests while letting residential requests through at normal rates. Zero agents did the reverse. The relationship is entirely one-directional.

If your monitoring tool runs from AWS, GCP, or Azure, most of the agents it tries to test are rejecting it outright. The tool ends up measuring the bot-detection wall your agent puts up, not the agent itself.

Rejection rate by group

Datacenter
74.2%
Residential
22.6%

Throttle rate by group

Datacenter
67.3%
Residential
15.8%
What this means for Datadog Synthetics, Pingdom, and every traditional monitoring tool: Your synthetic monitor runs from a datacenter, and the agent rejects it. The monitor reports the agent as down or unreachable, but the agent is actually up and working fine for real users. It just refused to respond to a datacenter IP.

How to read the 74% rejection rate

A common reaction is skepticism: if three quarters of datacenter-origin tests were rejected, how are production teams not noticing? The 74% is not “users experience a broken agent 74% of the time.” It is the share of datacenter-origin test attempts that never get a usable agent response — WAF blocks, HTTP 429, auth walls, challenge pages. Residential-origin tests on the same agents were rejected 22.6% of the time. Good teams are not knowingly shipping a 74% user-facing failure rate; they are often measuring from a network position the agent refuses to serve.

Two failure classes: Access failure is what the 74% / 22% numbers measure — paired datacenter vs residential examples in the Residentiality Report. Answer failure is when transport succeeds but the response is wrong — a separate semantic-evaluation problem (not origin-caused correctness). See the Residentiality Report’s section on semantic evaluation as a separate layer.

Finding 2

Naive correctness rates by origin are access-contaminated — not proof of worse answers.

Early rollups that compared “correct answer rate” across all datacenter probes versus all residential probes showed a gap (on the order of ~7pp in one export). That number is not a same-reachability correctness finding. Blocked and empty datacenter probes fail evaluation by construction. Folding them into a correctness denominator dresses reachability as answer quality.

~59%
Gold pass when datacenter origin reached the model
~57%
Gold pass when residential origin reached the model
~tied
Same-reachability gold — gap is access, not capability

When both origins actually reached the model, gold evaluation pass rates were nearly identical. The population story this report proves is the access asymmetry in Finding 1. It does not prove that residential IPs make agents smarter, or that datacenter IPs make them give worse answers after HTTP 200.

Sampling validity, not correctness-by-origin. Datacenter-only monitors compute uptime and (if they grade answers at all) correctness statistics on an access-skewed sample. Their numbers misrepresent the user-reachable surface. Grading a single retrieved answer is still not origin-dependent for stably wrong responses. Semantic “up but wrong” is a separate layer — see the Residentiality Report.

Finding 3

88% of agents show materially different access depending on where you test from.

We looked at agents where the rejection rate was within 5 percentage points between datacenter and residential — agents that treat both origins roughly equally at the edge. Only 731 out of 6,228 agents met that threshold, which is 12%.

The remaining 88% have materially different rejection profiles by origin. That is an access finding: the wall treats cloud ASNs and residential ASNs differently. It is not a claim that the model returns different gold answers once both sides get HTTP 200.

12%
Agents with near-equal rejection rates across origins
88%
Agents with materially different rejection by origin
If your monitoring tool runs from a datacenter, for 88% of these agents it is sampling a different access surface than residential users. That is the blind spot. Do not inflate it into origin-caused correctness.

Why This Happens

AI agents are not websites.

Synthetic monitoring was designed for web pages. Point it at a URL, check if the page loads, measure latency, alert if the server returns an error. That works for static content. It does not work for AI agents.

Agents have bot detection. Your agent sits behind rate limiting, IP reputation checks, and bot protection layers like DataDome, Cloudflare, and HUMAN. A datacenter IP looks like a bot. The edge may block it outright or throttle it aggressively. 74% of datacenter tests were blocked in our dataset. That is reachability, not a different gold answer after HTTP 200.

Answer quality is a separate question. A website either loads or it does not. An agent returns text, and whether that text is correct requires prompts plus evaluation. A successful server response does not mean the answer was right. Our March 2026 report found that 89% of agents with perfect uptime scored 0% on answer quality. Residential vantage helps you retrieve answers to grade on user-class networks; it does not make grading origin-dependent for stably wrong answers.

The coverage gap

ToolNetwork OriginReaches 64% of Agents?Evaluates Response Quality?
Datadog SyntheticsAWS / GCP datacenterNoNo
PingdomDatacenterNoNo
UptimeRobotDatacenterNoNo
New Relic SyntheticsDatacenterNoNo
AgentStatusResidential, 26 regionsYesYes

Key Takeaways

Four things this data proves.

1

Datacenter monitoring cannot reach 64% of AI agents.

3,995 of 6,228 agents blocked datacenter validations while allowing residential through. If your monitoring runs from AWS or GCP against WAF-protected public agents, the majority reject it before returning a response.

2

Same-reachability gold is tied — do not dress access as correctness.

When both origins reached the model, gold pass rates were nearly identical (~59% vs ~57%). Naive correctness gaps by origin are access-contaminated. Sampling validity is the honest correctness-adjacent claim.

3

Rate limiting is 4x worse for datacenter traffic.

Datacenter tests get throttled 67.3% of the time. Residential tests get throttled 15.8% of the time. That is edge policy by ASN, measured as access failure.

4

88% of agents show materially different rejection by origin.

Only 12% had near-equal rejection rates across datacenter and residential. For the other 88%, a datacenter monitor samples a different access surface than residential users.

Methodology

How we collected this data.

This report is based on first-party data from the AgentStatus distributed testing network. No third-party data sources were used.

The datacenter group consists of 1.55 million tests executed from cloud infrastructure IPs, including ranges used by major cloud providers. The residential group consists of 4.85 million tests executed from verified residential consumer devices on home networks across 26 regions.

Both groups tested the same pool of 6,228 production AI agents using identical prompts and the same automated scoring system. Agents were required to have data from both groups to be included in comparative analysis. The rejection rate comparison required at least 20 tests per group per agent. Headline access stats are from the frozen April 2026 cohort export (see backend docs/reports/anti-synthetic-april-2026/). Group A nodes were terminated gaming-farm providers; Group B was all other completed rora jobs in the window — a retrospective cohort, not a live dual-vantage product mode.

Related reading. This report is the controlled population study of datacenter vs residential reachability (rejection, throttle, directional block). The Residentiality Report scopes the architecture: inbound observer identity; tool egress out of scope; same-reachability correctness-by-origin not claimed. Access pairs from this cohort are documented there.

Key takeaway

Datacenter monitoring cannot reach most AI agents.

64% of agents in this cohort blocked datacenter validations while allowing residential through. If your monitor runs from AWS or GCP against WAF-protected public agents, the majority reject it before returning a response.

agentstatus
Published April 2026 by AgentStatus, a product of Carmel Labs, Inc.
agentstatus.dev

More research

Continue reading