So i had a debate recently where one of my colleagues believed that by launching a penetration test (one requested by our clients) from our one of our IP's we could potentially get that IP/all IP's in our block banned.
We are signed up with an ISP that allows for this kind of activity on our link (as long as its legally done), so my question is, do ISP's have the ability to detect and blacklist attack traffic on their networks? Do end-point 'client' firewalls have the ability to blacklist IP's not just on their firewall but to 'report it back' to some central server somewhere which will blacklist our IP across the world (to anyone using that blacklist)? I know such blacklists exist for Spam sources but i'm not sure about attack traffic.
- We are not using any bandwidth intensive attacks (like DDoS attacks which would adversely affect ISP traffic)
Hope someone can help! Thanks