It would be an automated scan and exploit across all services exposed, and the motivation is just to add a node to a botfarm/ddos network or spam node. Your website is already on a database if it has an SSL certificate and domain.

Like you said, shared hosting and low value server so you don't mind either way.