What is your criteria on assigning ports to SQL Server? Are you leaving them to default 1433? Is your SQL Server is exposed to Internet or any external sources where there is a chance to produce mass attach or run code injection? Every DBA should give a review about these 3 points on the terms of security...