How to tell compromised network users that their network is compromised [closed]
Even logging in to the router which you're not supposed to access would be a problem legally. Changing anything even more so. Reporting this to their ISP (based on a whois query) is pretty much the only "by the book" way to proceed.