Internet-Security.com UDP port 53413 details

UDP port 53413 is most notably used by a backdoor service present in many Netis/Netcore home routers (e.g., Netis WF241x/WF240x series).
Security researchers (e.g., Trend Micro and Rapid7, 2014) found these routers listen on UDP/53413 and accept specially crafted packets to execute commands.
This backdoor has been widely exploited in the wild; botnets such as Mirai/Gafgyt variants have scanned for and abused it to gain remote control and recruit devices for DDoS.
Some firmware updates reportedly mitigated the issue, but many devices have remained exposed on the internet.
No other common legitimate software or protocols are documented to use UDP 53413.

UDP 53413