AgentStatus by Carmel Labs · April 2026
Your Synthetic Monitor Can't Reach
64% of AI Agents
We tested 6,228 production AI agents from both datacenter and residential IPs using the same prompts. The gap that survives scrutiny is reachability: cloud synthetics often hit the bot wall; residential probes more often reach the product. Same-reachability gold is nearly tied — do not dress access as correctness.
The Study
We tested 6,228 agents from both datacenter and residential IPs.
We ran 1.55 million tests from datacenter IPs and 4.85 million tests from residential consumer devices against the same pool of production AI agents. The datacenter validations used the same IP ranges as Datadog Synthetics, Pingdom, UptimeRobot, and every other traditional monitoring tool. The residential validations came from real consumer devices on home networks across 26 regions.
Both groups used the same evaluation prompts and the same scoring pipeline. Each test produces a transport outcome (reached vs blocked/throttled/empty) and, when a response body exists, can be scored for answer quality. The causal variable this study isolates is network origin. The headline findings are about access asymmetry. Same-reachability gold rates are nearly tied; do not read access failure as origin-caused correctness.
Finding 1
Most AI agents refuse to talk to datacenter IPs.
The most important metric is the rejection rate: how often does the agent see the incoming request and refuse to respond? From a datacenter IP, agents rejected 74.2% of all tests. From a residential IP, that number drops to 22.6%.
The majority of monitoring traffic from datacenter IPs gets rejected before it ever reaches the agent.
Same agents. Different network path.
Datacenter monitors hit the wall most agents put up for cloud IPs.
Outcome
Synthetic “up” is mostly an allowlist illusion.
The majority of monitoring traffic from datacenter IPs gets rejected before it ever reaches the agent.
Residential observers take the inbound path customers actually use.
Outcome
Reachability is path-dependent.
From a residential IP, rejection drops sharply — because the request looks like a user, not a cloud probe.
of agents block datacenter but allow residential through
3,995 out of 6,228 agents rejected more than half of datacenter requests while letting residential requests through at normal rates. Zero agents did the reverse. The relationship is entirely one-directional.
If your monitoring tool runs from AWS, GCP, or Azure, most of the agents it tries to test are rejecting it outright. The tool ends up measuring the bot-detection wall your agent puts up, not the agent itself.
Rejection rate by group
Throttle rate by group
How to read the 74% rejection rate
A common reaction is skepticism: if three quarters of datacenter-origin tests were rejected, how are production teams not noticing? The 74% is not “users experience a broken agent 74% of the time.” It is the share of datacenter-origin test attempts that never get a usable agent response — WAF blocks, HTTP 429, auth walls, challenge pages. Residential-origin tests on the same agents were rejected 22.6% of the time. Good teams are not knowingly shipping a 74% user-facing failure rate; they are often measuring from a network position the agent refuses to serve.
Finding 2
Naive correctness rates by origin are access-contaminated — not proof of worse answers.
Early rollups that compared “correct answer rate” across all datacenter probes versus all residential probes showed a gap (on the order of ~7pp in one export). That number is not a same-reachability correctness finding. Blocked and empty datacenter probes fail evaluation by construction. Folding them into a correctness denominator dresses reachability as answer quality.
When both origins actually reached the model, gold evaluation pass rates were nearly identical. The population story this report proves is the access asymmetry in Finding 1. It does not prove that residential IPs make agents smarter, or that datacenter IPs make them give worse answers after HTTP 200.
Finding 3
88% of agents show materially different access depending on where you test from.
We looked at agents where the rejection rate was within 5 percentage points between datacenter and residential — agents that treat both origins roughly equally at the edge. Only 731 out of 6,228 agents met that threshold, which is 12%.
The remaining 88% have materially different rejection profiles by origin. That is an access finding: the wall treats cloud ASNs and residential ASNs differently. It is not a claim that the model returns different gold answers once both sides get HTTP 200.
Why This Happens
AI agents are not websites.
Synthetic monitoring was designed for web pages. Point it at a URL, check if the page loads, measure latency, alert if the server returns an error. That works for static content. It does not work for AI agents.
Agents have bot detection. Your agent sits behind rate limiting, IP reputation checks, and bot protection layers like DataDome, Cloudflare, and HUMAN. A datacenter IP looks like a bot. The edge may block it outright or throttle it aggressively. 74% of datacenter tests were blocked in our dataset. That is reachability, not a different gold answer after HTTP 200.
Answer quality is a separate question. A website either loads or it does not. An agent returns text, and whether that text is correct requires prompts plus evaluation. A successful server response does not mean the answer was right. Our March 2026 report found that 89% of agents with perfect uptime scored 0% on answer quality. Residential vantage helps you retrieve answers to grade on user-class networks; it does not make grading origin-dependent for stably wrong answers.
The coverage gap
| Tool | Network Origin | Reaches 64% of Agents? | Evaluates Response Quality? |
|---|---|---|---|
| Datadog Synthetics | AWS / GCP datacenter | No | No |
| Pingdom | Datacenter | No | No |
| UptimeRobot | Datacenter | No | No |
| New Relic Synthetics | Datacenter | No | No |
| AgentStatus | Residential, 26 regions | Yes | Yes |
Key Takeaways
Four things this data proves.
Datacenter monitoring cannot reach 64% of AI agents.
3,995 of 6,228 agents blocked datacenter validations while allowing residential through. If your monitoring runs from AWS or GCP against WAF-protected public agents, the majority reject it before returning a response.
Same-reachability gold is tied — do not dress access as correctness.
When both origins reached the model, gold pass rates were nearly identical (~59% vs ~57%). Naive correctness gaps by origin are access-contaminated. Sampling validity is the honest correctness-adjacent claim.
Rate limiting is 4x worse for datacenter traffic.
Datacenter tests get throttled 67.3% of the time. Residential tests get throttled 15.8% of the time. That is edge policy by ASN, measured as access failure.
88% of agents show materially different rejection by origin.
Only 12% had near-equal rejection rates across datacenter and residential. For the other 88%, a datacenter monitor samples a different access surface than residential users.
Methodology
How we collected this data.
This report is based on first-party data from the AgentStatus distributed testing network. No third-party data sources were used.
The datacenter group consists of 1.55 million tests executed from cloud infrastructure IPs, including ranges used by major cloud providers. The residential group consists of 4.85 million tests executed from verified residential consumer devices on home networks across 26 regions.
Both groups tested the same pool of 6,228 production AI agents using identical prompts and the same automated scoring system. Agents were required to have data from both groups to be included in comparative analysis. The rejection rate comparison required at least 20 tests per group per agent. Headline access stats are from the frozen April 2026 cohort export (see backend docs/reports/anti-synthetic-april-2026/). Group A nodes were terminated gaming-farm providers; Group B was all other completed rora jobs in the window — a retrospective cohort, not a live dual-vantage product mode.
Related reading. This report is the controlled population study of datacenter vs residential reachability (rejection, throttle, directional block). The Residentiality Report scopes the architecture: inbound observer identity; tool egress out of scope; same-reachability correctness-by-origin not claimed. Access pairs from this cohort are documented there.
Key takeaway
Datacenter monitoring cannot reach most AI agents.
64% of agents in this cohort blocked datacenter validations while allowing residential through. If your monitor runs from AWS or GCP against WAF-protected public agents, the majority reject it before returning a response.
More research
Continue reading
July 2026
You Can't Measure What You Can't Reach
Reachability and reliability are different problems. Almost every tool solves at most one — valid validation needs both.
Read reportJuly 2026
"But My Agent Can Be Wrong and Still Pass"
Two kinds of wrong. We catch the one that gives itself away through instability and rule-violation, and we're honest about the residue no outside-in method catches without ground truth.
Read reportJuly 2026
The Residentiality Report
The datacenter blind spot: reachability from where users are — and the hard limit on what outside-in can claim.
Read reportJune 2026
The Two Failures Hiding in LLM-as-a-Judge
Calibration problems shrink with better technique. Competence problems do not. The structural ceiling in agent evaluation, and the two methods older than language models that get past it.
Read reportMarch 2026
The State of AI Agent Reliability
We monitored 3,260 production AI agents across 48 countries. 89% with perfect uptime scored 0% on quality. The full data is inside.
Read reportApril 2026
The State of AI Agent Drift
88% of agents started giving worse answers at least once in 30 days. A look at how production AI agents drift - and the systemic March 29 event.
Read reportResearch
9 Businesses You Can Build on Agent Behavioral Data
Insurance underwriting, credit scores, compliance certification, procurement intelligence - the commercial layer that sits on top of continuous agent monitoring.
Read report