It seems that a typical website doesn't have the capability to know if the exploit was used against them, unless they are logging and able to analyze all IP com

It seems that a typical website doesn't have the capability to know if the exploit was used against them, unless they are logging and able to analyze all IP communications to and from their servers.