Text this: QuEst: Adversarial Attack Intensity Estimation via Query Response Analysis