I remember reading some pages back someone suggesting that anything above 90 is safe from bots instantly stealing your private key.
You can experiment yourself with #70, #75, etc and see how long it takes on your hardware, and based on how good it is, account for people who have a lot of hardware more powerful than yours.