Hi, I have a Sonos system comprising of 9 components being a mix of Sonos One, PLAY:1 x 2, PLAY:5, PLAYBAR, SUB, CONNECT:AMP, CONNECT ZP100, and a ZP80 which has grown over the years and recently started playing music, often at full volume sometimes on one component and sometimes grouping altogether, very randomly. It is happening so frequently now that sadly after many years of being a Sonos customer it may all be launched out of the various windows as its all become far too stressful. The music often says it is coming from Spotify (we set up an account with them a few months ago) but also sometimes says Soundcloud of which one of my kids has an account. I have disconnected the services and it still keeps doing it. We also have an Alexa dot but have pulled the power on that too! We have occasionally seen a guest Spotify account and stopped it and then its ok for a few hours then starts again but not as a guest this time. We are in a rural location so don't have any immediate neighbours which could be interfering. Sometimes the only way we can stop it is to shut the main power switch to the house!!! I have a case to call Sonos on Monday but we have to get through the rest of the weekend as this is destroying us so if anyone can help, please let me know in the meantime. Hopefully, we will make it to the end of the weekend without going nuts!!!!!!!!!!!!!
Best answer by h1lt0n
Change your WIFI password again and don’t give it to anyone for a couple days. Not even members of your household. Someone is messing with you. And no... music services have to be added manually through a device. Trace back the IP addresses Ryan posted above on everyone’s mobile devices.
Agreed. Someone has access to your network or devices on it and is messing with you. Additionally, based on where you say you live it's probably remote access.
How are they doing this? It could be a compromised cellphone or a compromised computer but more likely(considering how poor most router firmware is and that 50% of people use the default admin and password) its via your router.
Its probably some kid hopping on your network for kicks but it could be something a little nastier.
So I would suggest getting up early in the morning. Factory resetting your router. Installing the latest router firmware, disabling remote administration access of any kind to that router then changing the admin ID and password to something non-standard. Additionally, as stated by the poster above change the WiFi password AND make it different to the admin.
In the meantime as a precaution tell everyone in your household to run antivirus scans on laptops and change the passwords to their email/social media. Make sure everyone does this together in one sitting.
If this fails and these people really are out to 'mess up your Christmas' spend 200 bucks buy a 'Ubiquiti USG firewall' and stick it in front of your router. Then follow the Crosstalk tutorial on YouTube on how to set it up with basic firewall rules. It's gui driven and a doddle to set up. A decent firewall will keep most script kiddies out.