Disable password access, use keys instead. And install fail2ban to prevent brute force attempts.

Here is a good read about basic security: http://plusbryan.com/my-first-5-minutes-on-a-server-or-essen...