In fact Asterisk does allow letters for extension but use number for convenience. So the hacker must start with number and try simple password hacking for each password. If our password is composed of 8 alphanumerical digits or more. It should be okay.