There is a Punkbuster command that "scans" connected people for whatever you want, I think its "pb_sv_bindsrch +attack" this will then report what everyone connected has +attack bound too.
So if its key_mwheeldown +attack or key_mwheelup +attack a warning/kick/ban etc can be issued.
Hope this helps.