If for some bizarre reason you allow remote root logins over ssh be sure that that password is as strong as possible. Machine generated random strings are good, at least 12 characters to be sure.

If you turn off root logins but still allow user logins the remote attacking system will have no way to detect that fact and will still attempt to brute force you.