Internet-Security.com UDP port 407 details

UDP port 407 is used by Timbuktu Pro remote-control software (originally by Farallon, later Netopia/Motorola) for service discovery/connection setup; the suite also uses TCP/UDP 1417–1420 for data channels.
In real deployments (e.g., legacy Mac OS and Windows environments), hosts broadcast/listen on UDP 407 to find reachable Timbuktu endpoints and initiate remote-control sessions.
Many networks still observe UDP 407 traffic from legacy Timbuktu installations or leftover services on old Windows/Mac systems.
Security note: Because Timbuktu is remote-access software, attackers have occasionally scanned for or abused exposed Timbuktu services (including on UDP/TCP 407) to gain unauthorized access, especially on outdated or weakly protected deployments.

UDP 407