[root@morphed ~]# nmap -T Aggressive -sV -n -O -v 200.58.112.63
Starting Nmap 7.70 ( https://nmap.org ) at 2019-03-26 11:10 EDT
NSE: Loaded 43 scripts for scanning.
Initiating Ping Scan at 11:10
Scanning 200.58.112.63 [4 ports]
Completed Ping Scan at 11:10, 0.21s elapsed (1 total hosts)
Initiating SYN Stealth Scan at 11:10
Scanning 200.58.112.63 [1000 ports]
Discovered open port 995/tcp on 200.58.112.63
Discovered open port 993/tcp on 200.58.112.63
Discovered open port 25/tcp on 200.58.112.63
Discovered open port 443/tcp on 200.58.112.63
Discovered open port 143/tcp on 200.58.112.63
Discovered open port 110/tcp on 200.58.112.63
Discovered open port 587/tcp on 200.58.112.63
Discovered open port 80/tcp on 200.58.112.63
Discovered open port 21/tcp on 200.58.112.63
Discovered open port 465/tcp on 200.58.112.63
Completed SYN Stealth Scan at 11:11, 27.02s elapsed (1000 total ports)
Initiating Service scan at 11:11
Scanning 10 services on 200.58.112.63
Completed Service scan at 11:11, 12.26s elapsed (10 services on 1 host)
Initiating OS detection (try #1) against 200.58.112.63
Retrying OS detection (try #2) against 200.58.112.63
adjust_timeouts2: packet supposedly had rtt of -150184 microseconds.  Ignoring time.
adjust_timeouts2: packet supposedly had rtt of -150184 microseconds.  Ignoring time.
adjust_timeouts2: packet supposedly had rtt of -145773 microseconds.  Ignoring time.
adjust_timeouts2: packet supposedly had rtt of -145773 microseconds.  Ignoring time.
NSE: Script scanning 200.58.112.63.
Initiating NSE at 11:11
Completed NSE at 11:11, 0.44s elapsed
Initiating NSE at 11:11
Completed NSE at 11:11, 0.00s elapsed
Nmap scan report for 200.58.112.63
Host is up (0.043s latency).
Not shown: 984 filtered ports
PORT      STATE  SERVICE  VERSION
20/tcp    closed ftp-data
21/tcp    open   ftp      ProFTPD 1.3.5d
25/tcp    open   smtp     Exim smtpd 4.87_1
80/tcp    open   http     Apache httpd
110/tcp   open   pop3     Dovecot pop3d
143/tcp   open   imap     Dovecot imapd
443/tcp   open   ssl/http Apache httpd
465/tcp   open   ssl/smtp Exim smtpd 4.87_1
587/tcp   open   smtp     Exim smtpd 4.87_1
993/tcp   open   ssl/imap Dovecot imapd
995/tcp   open   ssl/pop3 Dovecot pop3d
50000/tcp closed ibm-db2
50001/tcp closed unknown
50002/tcp closed iiimsf
50003/tcp closed unknown
50006/tcp closed unknown
Aggressive OS guesses: OpenWrt Kamikaze 7.09 (Linux 2.6.22) (98%), Linux 2.6.18 (98%), OpenWrt 0.9 - 7.09 (Linux 2.4.30 - 2.4.34) (97%), OpenWrt White Russian 0.9 (Linux 2.4.30) (97%), Asus RT-AC66U router (Linux 2.6) (95%), Asus RT-N16 WAP (Linux 2.6) (95%), Asus RT-N66U WAP (Linux 2.6) (95%), Tomato 1.28 (Linux 2.6.22) (95%), Linux 2.4.18 (94%), Linux 2.6.19 - 2.6.32 (94%)
No exact OS matches for host (test conditions non-ideal).
Network Distance: 8 hops
TCP Sequence Prediction: Difficulty=252 (Good luck!)
IP ID Sequence Generation: All zeros
Service Info: Host: belgrano.dattaweb.com; OS: Unix