The transaction nonce is what is used to create the signature of the transaction or the r,s. It's private as it involves the private key to sign transactions
I'm kinda clueless here, but if it's private, it's not on the blockchain, right?
Brute forced as in mining is only way I am familiar with