Aiphone

Aiphone Door Station Hacked? Steps to Secure Your System

Your Aiphone door station shows signs of hacking? Secure your system with brand-specific steps. Expert guidance on SIP, PoE, and factory resets tailored for Aiphone users.

Is this your issue?

Door station shows unauthorized access attempts in the app or web interface
Calls from the intercom are not reaching the indoor monitor or app
SIP registration status shows 'unregistered' in the web interface
Door release button in the app clicks but the lock does not open
Unexpected power cycles or resets of the door station
Multiple failed login attempts recorded in access logs

Sound familiar? The guide below will help you fix it.

Aiphone Door Station Hacked? Immediate Steps to Secure Your System

If your Aiphone door station shows signs of unauthorized access, it's crucial to act swiftly. Common causes include compromised SIP credentials, outdated firmware, or misconfigured network settings. This guide provides brand-specific steps to restore security and prevent future breaches.

Fast Aiphone Fixes to Start With

Before diving into detailed troubleshooting, try these 30-second checks:

Power cycle the door station: Unplug the power supply (or disconnect the PoE cable) for 30 seconds, then reconnect.
Check power LED indicator: A steady green light indicates stable power; blinking or absence may signal a fault.
Test a call from the app: Open the AIPHONE IXG / Intercom App and attempt to initiate a call from the door station to the indoor monitor.
Verify screen responsiveness: Ensure the door station's display reacts to button presses or visitor interactions.
Check Ethernet/PoE cable: Confirm the cable is securely seated in the port and free of damage.

Step 1: Verify SIP Registration

SIP misconfigurations are a frequent cause of security vulnerabilities. To check SIP registration:

Open a web browser and log into your door station's interface at its IP address (e.g. http://192.168.1.100).
Navigate to Services → SIP.
Look for the Registration Status field. If it shows 'Unregistered', proceed to reconfigure SIP settings.
Ensure the Registrar Address and Proxy Server match your service provider's specifications. Incorrect settings can leave the device open to attacks.
For models like the IXG-2C7, use the IXG Support Tool to run a network diagnostics scan. This tool checks for blocked SIP traffic and NAT traversal issues.

Reconfigure SIP Settings

If SIP registration fails, re-enter your credentials:

Access the SIP section in the web interface.
Update the Username, Password, and Registrar Address fields with your service provider's details.
Save changes and restart the door station.

Step 2: Check PoE Power Budget

Insufficient PoE power can cause unexpected resets or failed firmware updates. To verify power allocation:

Access your PoE switch's management interface (usually via http://192.168.1.1 or a similar IP).
Locate the port connected to your door station and check the power allocation.
For the IX-DV, ensure the port delivers at least 15W. For the IXG-2C7, confirm it provides 25W or more.
If the switch displays 'Power Exceeded', consider upgrading to a higher-power PoE switch or using a PoE injector.

For Non-PoE Models

For models like the JO-1MD, confirm the 12V DC adapter outputs exactly 12V and 1.5A. Use a multimeter to verify voltage and current. Power fluctuations can cause intermittent connectivity issues.

Step 3: Configure VLAN and Network Settings

Incorrect VLAN configurations can expose your door station to network threats. To check VLAN settings:

Log into the door station's web interface at its IP address.
Navigate to Network → VLAN.
Ensure the VLAN ID matches your network's configuration. Mismatched VLAN IDs can prevent proper communication with SIP servers.
If VLAN tagging is enabled, confirm the switch port is configured to handle tagged traffic.

Step 4: Update Firmware and Enable 2FA

Outdated firmware and disabled 2FA are common security risks. To update firmware:

Access the Firmware Update tool in the web interface.
Download the latest firmware from Aiphone's support site (https://www.aiphone.com/support).
Upload the firmware file and follow the on-screen instructions to complete the update.

Enable Two-Factor Authentication

To enhance security:

Navigate to User Management in the web interface.
Enable Two-Factor Authentication (2FA) for all admin accounts.
Set up backup codes and ensure 2FA is enforced for remote access.

Step 5: Review Access Logs and Shared Users

Unauthorized access often goes unnoticed until it's too late. To review logs:

Log into the door station's web interface at its IP address.
Navigate to System → Access Logs.
Review the logs for any suspicious activity, such as failed login attempts or unexpected SIP registration events.
Check the Shared Users section to ensure only authorized accounts have access to the device.

When Basic Fixes Fail

If the issue persists after basic troubleshooting, proceed with advanced steps:

Factory reset the device: Follow model-specific instructions (see FAQ 4 for details).
Analyze SIP server logs: Use the IXG Support Tool to capture SIP traffic and identify potential vulnerabilities.
Test NAT traversal: Ensure your router's firewall rules allow SIP traffic (port) and UDP packets.
Contact manufacturer support: If issues remain unresolved, visit Aiphone's support site for further assistance.

Understanding Root Causes

Common reasons for Aiphone door station breaches include:

SIP configuration errors: Incorrect registrar or proxy settings can leave the device vulnerable.
PoE power shortages: Underpowered switches can cause unexpected resets or failed updates.
Codec mismatches: Incompatible audio/video codecs between the door station and receiving endpoints can disrupt communication.
NAT traversal failures: Incorrect firewall rules or port forwarding settings can block remote access.
UK-specific challenges: Exposure to weather on outdoor units and outdated building wiring can exacerbate connectivity issues.

Long-Term Aiphone Maintenance Tips

To avoid future breaches:

Schedule regular firmware updates and enable 2FA for all admin accounts.
Monitor PoE switch health and ensure adequate power budget for multi-device installations.
Weatherproof outdoor units and inspect wiring for damage during routine maintenance.

Full disclosure: We built scOS to solve persistent connectivity issues with wired systems — for intercom-specific problems, the steps above should resolve most issues.

When to Replace Your Aiphone Door Station

Most Aiphone door stations last 5-8 years with proper care. Signs that replacement is needed include:

Frequent firmware update failures or unresponsive web interfaces.
Physical damage to the housing or wiring that cannot be repaired.
Persistent connectivity issues despite following all troubleshooting steps.

Under the Consumer Rights Act 2015, UK consumers have up to 6 years to claim faulty goods (5 years in Scotland). If your device is under warranty, contact Aiphone's support team for replacement options.

Final Checks

After completing all steps, test your door station thoroughly:

Initiate a call from the app to ensure it connects to the indoor monitor.
Verify SIP registration status in the web interface.
Confirm 2FA is enabled and access logs show no unauthorized activity.
Test door release functionality to ensure it works as expected.

By following these steps, you'll secure your Aiphone door station and minimize the risk of future breaches.

What if this wasn't your problem to solve?

scOS detects suspicious activity — not motion. It only alerts you when something matters, like a person would. Designed to be left alone. All features included.

Detects Suspicious Activity

Not motion — actual suspicious behaviour. Like a person would notice.

Designed to Be Left Alone

No settings to tweak. No app to check. It just works.

All Features Included

No subscriptions. No tiers. Everything works from day one.

See why this keeps happening

Works with any wired camera brand. See all features

Frequently Asked Questions

Security breaches on Aiphone systems often stem from SIP configuration vulnerabilities or outdated firmware. Begin by checking your door station's SIP registration status via the AIPHONE IXG / Intercom App. Ensure the registrar address matches your service provider's details and that authentication credentials are secure. If SIP registration fails, re-enter credentials in the web interface at the device's IP address under Services → SIP. For PoE-powered models, confirm your switch supports at least 12W per port. For wired models, verify the 12V DC adapter meets specifications. Regular firmware updates and enabling 2FA in the User Management section of the web portal are also critical.

To verify SIP registration, log into your Aiphone door station's web interface at the device's IP address. Navigate to Services → SIP and check the Registration Status field. If it shows 'Unregistered', ensure the Registrar Address and Proxy Server settings match your service provider's configuration. Test by pinging the registrar address from the door station's network. If unreachable, check firewall rules or contact your ISP. For models like the IXG-2C7, use the IXG Support Tool to run network diagnostics and confirm SIP traffic is not being blocked by NAT traversal issues.

Aiphone's PoE power budget is critical for multi-device installations. Access your PoE switch's management interface and verify the power allocation for the port connected to your door station. Models like the IX-DV require at least 15W, while the IXG-2C7 may need up to 25W. If the switch shows 'Power Exceeded' for the port, consider upgrading to a higher-power PoE switch or using a PoE injector. For non-PoE models like the JO-1MD, confirm the 12V DC adapter outputs exactly 12V and 1.5A. Power fluctuations can cause intermittent connectivity issues.

To reset your Aiphone door station securely, use the factory reset procedure specific to your model. For the IX-DV, press and hold the factory reset button on the rear for 10 seconds until the LED flashes rapidly. For the IXG-2C7, hold the reset button on the monitor for 15 seconds. After resetting, reconfigure SIP settings, enable 2FA in the User Management section, and update firmware via the Firmware Update tool in the web interface. Always back up current configurations before resetting.

All Troubleshooting Guides