367
Summary
- // typical exposure
- Anomalous (rarely legitimately open) — No RFC or vendor documentation shows any modern deployment of MortgageWare on the public internet, and the product is niche mortgage-industry line-of-business software with no publicly known wire protocol, so an open port 367 is unexpected and should be treated as anomalous rather than assumed legitimate.
- // analyst note
- Given the blank IANA reference and unverifiable modern usage, an open port 367 is unusual and should be investigated rather than assumed benign.
- // if you see it open
- No documented legitimate internet-facing use; no known CVEs or malware associations were found. MortgageWare is niche enterprise/line-of-business mortgage software with no publicly documented network footprint, so an unexpected open port 367 should be treated as anomalous and investigated rather than assumed benign.
About port 367/tcp.
Port 367/tcp carries no confirmed public-facing service today; IANA reserves it for "mortgageware" (MortgageWare), but no RFC, vendor documentation, or scan/exposure data confirms real-world use on the modern internet, so an open port 367 should be treated as unexpected and investigated rather than assumed legitimate.
IANA's Service Name and Transport Protocol Port Number Registry lists port 367 (dual-registered on both TCP and UDP) under the service name mortgageware, described simply as "MortgageWare," assigned to Ole Hellevik. No RFC or other reference document backs the entry — the Reference, Registration Date, and Modification Date columns are all blank, consistent with a bare early-era name reservation rather than a fully specified protocol.
MortgageWare appears tied to InterLinq Software, a mortgage-loan origination and processing software vendor, but no publicly available specification, client, or server implementation describing a wire protocol for this port could be located. If the product line is still active, it reads as enterprise line-of-business software rather than anything with an intended public network footprint.
No independent evidence of real-world traffic, scanning prevalence, malware association, or exposure was found in this research pass. Two secondary port-reference sites that sometimes catalog such community-sourced trivia (SpeedGuide and AdminSubnet) were unreachable (HTTP 403 and 522 respectively) and could not be consulted. Given the obscurity of the underlying product, it is plausible that little or no modern traffic exists on this port.
- IANA assignment
mortgageware— "MortgageWare"; reference (blank — no RFC cited); assignee Ole Hellevik; dual-registered 367/tcp + 367/udp [Confirmed] — IANA Service Name and Transport Protocol Port Number Registry- Range class
- well-known (0–1023) [Confirmed] — port number falls in the IANA well-known range
- Prevalence
- Not verified in this research pass (no nmap-services frequency sourced) [Unknown]
- Related ports
- Not established in this research pass [Unknown]
Primary use
Legacy name reservation for "MortgageWare," an InterLinq Software mortgage-loan origination/processing product; no RFC defines a wire protocol
Other/unofficial uses
None documented [Unknown]
Security implications
No documented legitimate internet-facing use; no known CVEs found; an unexpected open port should be treated as anomalous
Typically seen on
Unknown — no confirmed real-world deployments were found [Unknown]
- Analyst note
- Given the blank IANA reference and unverifiable modern usage, an open port 367 is unusual and should be investigated rather than assumed benign.
About port 367/udp.
Port 367/udp is registered with IANA to "mortgageware" (MortgageWare), an older mortgage-industry software product; no protocol specification or RFC was ever published for it, so there is no documented legitimate reason for it to be reachable from the public internet, and any external-facing traffic on this port should be treated as unexpected rather than routine.
IANA's registry lists port 367 as dual-registered on both TCP and UDP, assigned to Ole Hellevik, with description "MortgageWare" and a blank Reference column — meaning no RFC or specification document backs the assignment (IANA Service Name and Transport Protocol Port Number Registry, cached at the IANA Service Name and Transport Protocol Port Number Registry, lines 727-728).
Beyond that name/description pairing, no protocol documentation, vendor manual, or wire-format specification for MortgageWare on this port could be located. Research into real-world software sightings, scanning/exposure telemetry, and malware or trojan associations for port 367 turned up nothing; this pass hit its web-search budget limit and two dead secondary sources (SpeedGuide.net returned 403, a university port-scan reference page returned 404), so those angles could not be completed and are reported as Unknown rather than guessed.
Given the blank RFC reference, single-vendor assignment history, and total absence of contemporary usage or threat reporting, an analyst encountering traffic on 367/udp should treat it as unusual — plausibly tied to legacy mortgage-processing software if a documented history exists on that host, or worth investigating as anomalous/unexplained otherwise.
- IANA assignment
mortgageware— "MortgageWare"; reference (blank — no RFC cited in IANA registry); assignee Ole Hellevik; dual-registered 367/tcp + 367/udp [Confirmed] — IANA Service Name and Transport Protocol Port Number Registry- Range class
- well-known (0–1023) [Confirmed]
- Prevalence
- no telemetry/nmap-services open-frequency data found in this research pass [Unknown]
- Related ports
- 367/tcp — the same
mortgagewareregistration, dual-registered by IANA with an identical description ("MortgageWare") and the same assignee/contact [Ole_Hellevik]; a service-name and assignee search of the cached registry returns these two rows and no others, so 367/tcp is the only port related to this one by registration[Confirmed] — the IANA Service Name and Transport Protocol Port Number Registry mortgageware 367/tcp
Primary use
registered name/description only for "MortgageWare," a mortgage-industry software product; no protocol specification was ever published
Other/unofficial uses
none documented [Unknown]
Security implications
no CVEs, malware, or trojan associations found; no protocol spec exists to assess; essentially unseen on modern networks
Typically seen on
legacy MortgageWare software hosts, if any still exist; otherwise anomalous/unexplained [Unknown]
- Analyst note
- A blank IANA Reference field plus a total absence of contemporary usage evidence make this an obscure, essentially-unused port; investigate any observed traffic rather than assume it is benign.
Service assignments.
| Name | Protocol | Description | Open frequency |
|---|---|---|---|
| mortgageware | UDP | — | 0.04% |
| mortgageware | TCP | — | 0.00% |
Service assignments from the IANA Service Name and Transport Protocol Port Number Registry, with open-frequency data from nmap-services.