Sorry, my fault, I forget to say I was accessing to RUT230 through his public IP. I manually reboot RUT230 (power off-power on) and I got again his standard user interface.
I supposed it could have been hacked but more probably (I hope) just mismatch due to public IPs.