ehem ... :D I installed Asus's latest for this router (RT-AC56U_3.0.0.4_382_50624-gdf1b286)
Because I lost 3 days debuging this and I was afraid if I try an unofficial one like Merlin, I might notice a small bug and I didn't want to risk losing more time.
And because it says they fixed the...
I had a similar situation and I suspect the hacking affected the ability to re-flash the router, it only worked with a smaller firmware (Merlin 378.55_0 ~28MB), and after that reflash, it worked with larger firmware.
Maybe that helps to save some days of struggle :)
Thanks for the tips, I got it working.
RMerlin mentioned that it might be a partition size issue, but that the version I am shown (3.0.0.4.380_7266-g6439257) should already have a large enough partition setup.
I loaded an older and smaller firmware (Merlin 378.55_0, ~28MB) and it worked, and...
edit: md5 checksum of files are OK.
I actually did this step moments before this post^
It takes ~10 minutes to upload the firmware, but doesn't complain about anything, it reboots the router and nothing was changed.
On second try I also cleared the NVRAM, then uploaded firmware, at this point...
After I set my ipv4 to 192.168.1.10, I plug my cable to lan port 4/4, the wan port is unplugged.
I put it in recovery more, power led flashes slowly, from cmd prompt I can now ping 192.168.1.1 ...
I open the firmware restoration app, I browse for the .trx file ...
1-2 seconds after I click...
Can you tell me about that setup ...
Do I need to connect by wire (I don't think it "sees" it as wifi) and if so, in which router cable I should plug the computer ?
The images also show 2 wires and it's a bit confusing.
Thank you.
I could not find modified DDNS or VPN server but this is after I reset settings maaaaany times.
I do have the syslog before the reset: https://tntfiles.com/tp2vdiphyb/asus-syslog-before-update-txt
Not much data from the logs, I think (as logs show) since August to March it was offline.
I have the RT-AC56U router for some years, I used it on and off, with even 1 year sitting connected but unused.
I remember I seen it 2-3 times showing some Korean or another Asian language when accessing the web interface.
Now when I searched about it, I found some references to hacked routers...
My bad, I actually have Asus AC 56U and this topic is about 68U.
But the issue is there, I run above firmware (out of date) and router cannot "see" the new version. I need to look into manual firmware update.
So the "Korean" thing was indeed a known hack ? :O
It is 3.0.0.4.380_7266-g6439257
And I see that if I check for firmware it loads forever, but the asus site does show a newer one 3.0.0.4.382.50624.
I think someone tweaked my router :))
@Bertie7 did you find the router changed to Koreean out of nowhere ? If so, did it had the web port open to manage it over Internet ?
Because it happen to me a few times and I am thinking it could have been hacked ?!