Current theory is they are testing their botnet. Basically they are not succeeding at all, and we are confused why they aren't successful. Even throwing random passwords they should have a higher success rate. Their success rate is like <0.01%.
My heart is in a jar upon the wall. Where is yours?