WHATPORT(8686) whatport.net WHATPORT(8686)
8686

GlassFish JMX/RMI (sun-as-jmxrmi)

The JMX remote management connector for GlassFish and its Sun Application Server ancestors.

TCP IANA registry

Description

IANA registers sun-as-jmxrmi on 8686, "Sun App Server - JMX/RMI", from 2005. GlassFish still uses it: the administration guide lists 8686 as the "Pure JMX Clients Port" and shows the domain creation output naming it JMX_ADMIN, with JConsole connecting to service:jmx:rmi://host:8686/jndi/rmi://host:8686/jmxrmi. It appears on Java application servers of that lineage — GlassFish, Payara, and older Sun/Oracle Application Server installs. A JMX connector exposes MBeans that can read and change server configuration at runtime.

Exposed to the internet?

Do not expose

Remote JMX/RMI is a management plane, and unauthenticated JMX endpoints are a well-worn route to code execution on the JVM. Bind it to localhost and tunnel, or require authentication and TLS on the connector.

Check it yourself

$ nc -vz TARGET 8686

See also

Seen this on your network? Beige Box scans your Wi-Fi and shows every open port on every device — and its Ports tool links straight back here.

Get Beige Box →

also available as JSON · Markdown

Corrections or a missing port? Reply @rimrocksystems.