Internet-Security raven logo internet-security.com

TCP 1098

ProtocolTCP
Port1098
Labelsrmiactivation Java remote method invocation (RMI) activation

Synopsis

  • TCP port 1098 is IANA-registered for rmiactivation, the Java RMI Activation service.
  • The Java RMI Activation System Daemon (rmid), included with Oracle JDK and OpenJDK, listens on 1098 by default to start remote Java objects on demand.
  • Real-world example: Apache River (Jini) deployments and tutorials commonly run rmid on port 1098 to support activation-based services.
  • Security note: attackers probe 1098 because exposed RMI activation endpoints have had deserialization-based remote code execution issues in unpatched Java runtimes (e.g., CVE-2016-0636), so it should not be publicly accessible.

Observed activity

Last 30 days Detailed chart

More information