How long was the tool open for?
EDIT: for context, I recently changed how the login check is done, instead of using /account/ it uses /sam/latest_alpha/ which also requires login, but is less heavy on f95zone's backend. However from /account/ I also used to grab the xfToken which is needed for notification checking and quick search. As a temporary solution I made it so the first login check uses /account/ and grabs the xfToken, then subsequent login checks use /sam/latest_alpha/ so it's less heavy and doesn't rate limit you. But my guess is, xfToken needs to be changed every now and then, and probably more often than I had hoped. Might need to go back to using /account/ with rate limiting, or find another way to sniff xfToken (maybe a cookie, or maybe it is also in /sam/latest_alpha/ returned html, or maybe it can be generated in some other way)