Looks to me like he stumbled on a bitcoin payment processing system?
That would explain how the "bot" knows a transaction is about to occur and why the bitcoins were being transferred within minutes of arriving.
The addresses he finds are temporary addresses a customer is directed to send payment, and then transferred to a more secure wallet shortly after confirmation.