Ssh security with hosts.allow

[Steve Warwick]

Hi All, 

Since implementing a hosts.allow "deny" on SSHD for all but my IP I am
seeing a slew of ssh attempts from overseas.

My questions are: 
    
    Is a good password and hosts.allow enough to keep out the bad guys?

    Is this normal? (I assume these attempts are automated)

Thanks

Steve