Port 8686Sun App Server JMX/RMI
JMX/RMI management traffic for Sun Application Server deployments.
- transport
- tcp · udp
- in transit
- cleartext
- assignment
- official
- risk
- 8/10
- lookups
- 0
2 transports registered
payload readable on path
registered with iana
risk
rank 993 of 4,699 · top 21%
also known as sun-as-jmxrmi, Sun Application Server JMX/RMI
Technical Details
what runs on :8686The service normally runs over TCP using Java RMI/JRMP and exposes a JMX connector, commonly addressable with a URL such as service:jmx:rmi:///jndi/rmi://host:8686/jmxrmi. The connection uses an RMI registry or connector endpoint followed by Java serialization and JMX operations; depending on the application-server version and configuration, RMI may advertise or open an additional callback/server port. UDP is part of the registry assignment but is not normally used by the JMX/RMI protocol. Port 8686 is associated with JMX, while the same server commonly uses ports such as 4848 for its administration interface and 8080/8181 for HTTP/HTTPS application traffic.
Security Information
exposure of :8686risk score
8/ 10risk
treat as sensitive. widely scanned and regularly exploited when reachable — restrict it to known sources.
system averages 2.7 across 915 ports — this one sits 5.3 above.
in transit
cleartext
credentials and payloads are readable by anyone on path
assignment
official
registered with iana for this service — scanners fingerprint it by number
reachable over
tcp · udp
udp is connectionless — source addresses are trivially spoofed and it is a reflection favourite
security overview
This port should not be exposed to the public Internet. An exposed JMX/RMI connector can disclose server management data and, depending on authentication, authorization, Java version, and application-server configuration, allow administrative operations or dangerous MBean actions; older Java RMI/JMX deployments have also been affected by deserialization and remote-code-execution issues. Restrict it to trusted management networks, require the server's authentication and authorization controls, enable SSL where supported, and account for any additional RMI ports in firewall rules.
Related Ports
the 8 most looked-up other ports in system — 915 ports carry that label.
| port | service | risk | |||
|---|---|---|---|---|---|
| :8888 | Sun Answerbook & Alt HTTP | TCP | Web Services | caution | 123.9k |
| :4664 | Google Desktop Search | TCP | System | caution | 67.2k |
| :8008 | IBM HTTP Server Admin | TCP | Web Services | caution | 58.3k |
| :3268 | Microsoft Global Catalog (GC) | TCPUDP | Security | caution | 54.6k |
| :135 | Microsoft EPMAP | TCPUDP | Security | caution | 51.9k |
| :9080 | WebSphere HTTP Transport (default) | TCP | Web Services | caution | 51.6k |
| :23 | Telnet | TCP | Remote Access | caution | 34.8k |
| :12489 | NSClient Monitoring Agent | TCP | Network Services | caution | 30.0k |
risk mix of the 8 listed
- caution100%
0 of 8 encrypted