Why are you wasting your time on addresses and their 160 bit binary values? Don't you know an address does not exist in bitcoin related equations? An address is just a name base58 encoding gives us, a rmd160 is just a name public key hash gives us, public key hash is just a name public key gives us, public key is not a "name" given by private key.
That's the only mathematical relationship we should focus, leave the rest be, even if you manage to brute force 66, what about 67? so the main focus should be on public keys, because hash256, hash160, base58 etc are just distraction, they are the firewalls and you are trying to solve a 160 bit firewall to then reach a 256 bit firewall. Lol.