First off: the program would not be very hard to write, the only problem you would have is analysising the security phrase, and the email verification. The phrase part of the program would be virtually impossible. You would need a very powerful computer to figure out the phrase in a reasonable amount of time.
The bots could be doing this for any of the following: Server Overload, Advertisements, Spiders, Phishing, Information Gathering.