it was most likely brute forced

also im still getting too many attempts after over 2 days of not even inputting any codes

it goes to show how badly implemented this was