The problem is that 111111 and 999999 as well as 123456 etc are probably at the top of the list of codes to try before you start iterating brute force.