Port 995 (POP3S)
TCPPOP3 over SSL — POP3S listens on port 995 by default.
What is Port 995?
Port 995 is the default port for POP3S (POP3 over SSL/TLS), the encrypted version of the Post Office Protocol. It provides secure email downloading from mail servers with TLS encryption.
POP3S on port 995 wraps the entire POP3 connection in TLS encryption, protecting credentials and email content during download. Unlike IMAP, POP3 downloads messages and typically removes them from the server, making it suitable for single-device email access.
Most email providers now require encrypted connections and support port 995 for POP3 access. For multi-device email access with synchronization, IMAPS on port 993 is generally preferred over POP3S.
Port 995 Security
POP3S on port 995 should be secured with appropriate access controls and monitoring. Ensure the service is only accessible from trusted networks by configuring firewall rules to restrict access. If the protocol supports encryption, enable TLS/SSL to protect data in transit.
Regularly update POP3S to the latest version to patch known vulnerabilities. Monitor port 995 for unauthorized access attempts and implement rate limiting where possible. Follow the principle of least privilege when configuring access permissions.
How to Check Port 995
To check if port 995 is open on a remote host, use nmap: 'nmap -p 995 hostname'. For a quick TCP connection test, use: 'telnet hostname 995' or 'nc -zv hostname 995'. On Windows PowerShell, use: 'Test-NetConnection -ComputerName hostname -Port 995'.
To check if port 995 is listening on your local machine, use: 'netstat -tlnp | grep 995' on Linux, or 'ss -tlnp | grep 995'. On Windows, use: 'netstat -an | findstr 995'. For a comprehensive scan, use: 'nmap -sV -p 995 hostname' to detect the service version running on the port.
Related Ports
Frequently Asked Questions
What is port 995 used for?
Port 995 is the default port for POP3 over SSL (POP3S). It is used for pop3s communication using the TCP protocol.
Is port 995 TCP or UDP?
Port 995 uses TCP. TCP is used because pop3s requires reliable, ordered data delivery.
Should port 995 be open?
Port 995 should only be open if you are actively running POP3S. Close unused ports to reduce your attack surface. If needed, restrict access to trusted IP addresses using firewall rules.
How do I check if port 995 is open?
Use 'nmap -p 995 hostname' to scan remotely, or 'netstat -tlnp | grep 995' to check locally on Linux. On Windows, use 'Test-NetConnection -Port 995 hostname' in PowerShell.
How do I secure port 995?
Secure port 995 by restricting access with firewall rules, using encryption (TLS/SSL) where supported, keeping POP3S updated, using strong authentication, and monitoring for unauthorized access attempts.
🔍 Check Your IP Address
While you're here, find out your public IP address, location, and ISP details instantly.
Check My IP →