I remember there were some brute forcing tools for iPhone 3GS passcode back in 2010. It only took a few minutes. Perhaps, it didn't really brute force but searched the passcode from the device.