[kh99]

There are tools out there which will process the web server access log to look for things like that. If you google for it you'll find a number of them. I suppose you could get something to work within vbulletin (if that's what you're asking for) by finding a source of the patterns that are matched to detect attacks, then applying them to the url whenever a vbulletin page is requested, and if there's a match put it in a log somehow.

But I don't know of anything like that that exists already, unless maybe one of the dbtech mods has that as a feature. I added it to my list of mod ideas, but the way things are going I don't know if or when I'd get around to it.