# WHATPORT(8686)

## NAME

port 8686 — GlassFish JMX/RMI (sun-as-jmxrmi) — The JMX remote management connector for GlassFish and its Sun Application Server ancestors.

Protocol: TCP  
IANA registry

## DESCRIPTION

IANA registers sun-as-jmxrmi on 8686, "Sun App Server - JMX/RMI", from 2005. GlassFish still uses it: the administration guide lists 8686 as the "Pure JMX Clients Port" and shows the domain creation output naming it JMX_ADMIN, with JConsole connecting to service:jmx:rmi://host:8686/jndi/rmi://host:8686/jmxrmi. It appears on Java application servers of that lineage — GlassFish, Payara, and older Sun/Oracle Application Server installs. A JMX connector exposes MBeans that can read and change server configuration at runtime.

## EXPOSURE

**Do not expose.** Remote JMX/RMI is a management plane, and unauthenticated JMX endpoints are a well-worn route to code execution on the JVM. Bind it to localhost and tunnel, or require authentication and TLS on the connector.

## CHECK

```sh
nc -vz TARGET 8686
```

## SEE ALSO

- docs — [Eclipse GlassFish Administration Guide (JMX port 8686)](https://glassfish.org/docs/latest/administration-guide.html) (glassfish.org)
- source — [Eclipse GlassFish source repository](https://github.com/eclipse-ee4j/glassfish) (github.com)
- iana — [IANA Service Name and Transport Protocol Port Number Registry](https://www.iana.org/assignments/service-names-port-numbers/service-names-port-numbers.xhtml) (iana.org)

---

HTML: <https://whatport.net/8686/> · JSON: <https://whatport.net/8686.json> · full dataset: <https://whatport.net/ports.json>