Port 995: POP3S
Port 995 is POP3 over TLS, the encrypted way to download email with POP.
What runs on port 995
POP3S wraps the POP3 session in TLS from the start on TCP 995. Mail providers that still support POP offer it here. It protects the password and messages in transit, unlike plain 110.
On a home network
Home devices do not listen on 995 unless you host mail. Mail clients connecting out to 995 is normal.
If port 995 is reachable from the internet
On a mail server, 995 being reachable is expected. As with any mail login, the risk is password guessing, not the port itself. At home, nothing should answer on 995 unless you run a mail server.
How to check whether it is open on your network
If an outside scan of your public address shows 995, find the mail server behind it and confirm you meant to publish it.
To find out whether port 995 is open on something in your home, and whether the internet can reach it, the app scans your Wi-Fi from your phone and checks your public address from the outside. It says what it checked and what it could not. Get RECON for iPhone — one-time purchase, no account, nothing leaves the device.