IIRC there are 2^160 possible addresses. So 2^160 private keys.
Even with the current market, we didn't even use 0.01% of it(no research here, it's just obvious that we didn't generate that many addresses), so brute forcing would be stupid or a lucky strike.