Internet-Security.com TCP port 995 details

TCP port 995 is the default port for POP3 over SSL/TLS (POP3S).
Major providers use it: Gmail (pop.gmail.com:995), Outlook/Microsoft 365 (outlook.office365.com:995), and Yahoo Mail (pop.mail.yahoo.com:995).
Mail servers that listen on 995 for secure POP include Microsoft Exchange Server, Dovecot (commonly with Postfix or Exim), Courier, Zimbra, Kerio Connect, and hMailServer.
Hosting panels like cPanel/WHM and Plesk typically run Dovecot/Courier on 995 for POP3S.
Email clients such as Microsoft Outlook, Mozilla Thunderbird, Apple Mail, and iOS/Android Mail connect to 995 to retrieve mail via POP3S.
Turnkey mail stacks like iRedMail and mailcow-dockerized expose POP3S on 995 (via Dovecot).
Attackers commonly target port 995 for credential brute-force against POP3S logins when the service is exposed to the internet.

TCP 995