every min they were brute forcing my sshd which I found from /var/log/auth.log also I saw a few unusual entries in my db.

Disable password access, use keys instead. And install fail2ban to prevent brute force attempts.

Here is a good read about basic security: http://plusbryan.com/my-first-5-minutes-on-a-server-or-essen...