The JMX remote management connector for GlassFish and its Sun Application Server ancestors.
IANA registers sun-as-jmxrmi on 8686, "Sun App Server - JMX/RMI", from 2005. GlassFish still uses it: the administration guide lists 8686 as the "Pure JMX Clients Port" and shows the domain creation output naming it JMX_ADMIN, with JConsole connecting to service:jmx:rmi://host:8686/jndi/rmi://host:8686/jmxrmi. It appears on Java application servers of that lineage — GlassFish, Payara, and older Sun/Oracle Application Server installs. A JMX connector exposes MBeans that can read and change server configuration at runtime.
Do not expose
Remote JMX/RMI is a management plane, and unauthenticated JMX endpoints are a well-worn route to code execution on the JVM. Bind it to localhost and tunnel, or require authentication and TLS on the connector.
$ nc -vz TARGET 8686Seen this on your network? Beige Box scans your Wi-Fi and shows every open port on every device — and its Ports tool links straight back here.
Get Beige Box →also available as JSON · Markdown
Corrections or a missing port? Reply @rimrocksystems.