Yep, that a good option. But only with a key ! Not with a password.

Bot from everywhere will try to forcebrut attack with many password attempt.

I got in this situation in the past. Nothing wrong happened, but it was stressfull.