HTTPfy

Port 995 (POP3S)

POP3 over implicit TLS.

Well-known (system) port, 0-1023 TCP Email Meant to face the internet

What port 995 is used for

POP3 over implicit TLS.

Security: should port 995 be open?

Meant to face the internet. Fine to expose on a mail server. Rate-limit logins and require strong passwords; mailbox brute-forcing is common.

IANA assignment

Service nameProtoDescriptionAssigneeReference
pop3s TCP POP3 over TLS protocol IESG RFC 8314
pop3s UDP pop3 protocol over TLS/SSL (was spop3) Gordon Mangione -

Registry dates for this port: last modified 2017-12-12.

Check what is listening on port 995

Linux: is anything listening on TCP 995?
sudo ss -tlnp 'sport = :995'
Linux / macOS: which process owns the port
sudo lsof -nP -i :995
Older Linux / BSD (net-tools)
sudo netstat -tlnp | grep ':995 '
Windows (Command Prompt)
netstat -ano | findstr :995
Windows (PowerShell)
Get-NetTCPConnection -LocalPort 995 -State Listen | Select LocalAddress,OwningProcess

Test it from outside

From another machine
nc -vz -w 5 HOST 995
From Windows
Test-NetConnection HOST -Port 995

Open port 995 in the firewall

ufw
sudo ufw allow 995/tcp
iptables
sudo iptables -A INPUT -p tcp --dport 995 -j ACCEPT
nftables
sudo nft add rule inet filter input tcp dport 995 accept
Windows Firewall
New-NetFirewallRule -DisplayName 'Allow TCP 995' -Direction Inbound -Protocol TCP -LocalPort 995 -Action Allow

Related ports

110POP3993IMAPS587SMTP submission992Telnet over TLS996vsinet999applix

All port numbers · Open port checker
Assignment data: IANA port number registry (public domain), retrieved 2026-11-10.