Common signs of an input validation attack include unexpected behavior in web applications, such as error messages appearing for no apparent reason, data corruption or loss, unauthorized access to sensitive information, and unusual system performance issues.