What is port 995 used for?
POP3 over TLS.
Should port 995 be open?
Usually open to the internet. This port is meant to be reachable publicly on servers that offer the service. The secure version of POP3. IMAP (993) is usually better because it keeps mail in sync across devices.
See what is listening on port 995
# Linux
sudo ss -tlnp | grep ':995 '
# macOS
sudo lsof -nP -i TCP:995 -sTCP:LISTEN
# Windows (PowerShell)
Get-NetTCPConnection -LocalPort 995 -State Listen
Open or block port 995 in a firewall
# Ubuntu / Debian (ufw)
sudo ufw allow 995/tcp
sudo ufw deny 995/tcp
# Windows (PowerShell, as administrator)
New-NetFirewallRule -DisplayName "Port 995" -Direction Inbound -Protocol TCP -LocalPort 995 -Action Allow
On cloud servers, also open the port in the provider’s security group or network firewall. At home, a service behind a router needs a port-forwarding rule to the device’s local IP.
Test it from outside
A port can be open on the server but blocked upstream. The Port Checker connects from the internet, so it shows what the world sees. From your own machine, use nc -vz example.com 995 (macOS/Linux) or Test-NetConnection example.com -Port 995 (Windows).