Nmap scan report for mx1.hc2781-64.iphmx.com (216.71.148.142)
Host is up (0.029s latency).
Other addresses for mx1.hc2781-64.iphmx.com (not scanned): 216.71.143.52
rDNS record for 216.71.148.142: esa.hc2781-64.iphmx.com
Not shown: 996 filtered tcp ports (no-response), 3 filtered tcp ports (admin-prohibited)
PORT   STATE SERVICE VERSION
25/tcp open  smtp    IronPort smtpd
|_ssl-date: TLS randomness does not represent time
| smtp-commands: esa.hc2781-64.iphmx.com, 8BITMIME, SIZE 52428800, STARTTLS
|_ The following commands are recognized auth data ehlo helo help mail noop quit rcpt rset starttls vrfy
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): FreeBSD 11.X (85%)
OS CPE: cpe:/o:freebsd:freebsd:11.0
Aggressive OS guesses: FreeBSD 11.0-RELEASE (85%), FreeBSD 11.2-STABLE (85%)
No exact OS matches for host (test conditions non-ideal).
Network Distance: 14 hops
Service Info: OS: AsyncOS; Device: specialized; CPE: cpe:/o:cisco:asyncos

TRACEROUTE (using port 25/tcp)
HOP RTT      ADDRESS
1   0.20 ms  208.76.251.177.rdns.ColocationAmerica.com (208.76.251.177)
2   0.73 ms  gw.mcom-colocationamerica.com (208.64.231.81)
3   2.09 ms  r2b4.n1.p1401.lax.multacom.net (64.69.46.11)
4   ...
5   7.25 ms  be2536.rcr21.las02.atlas.cogentco.com (154.54.82.26)
6   8.31 ms  be2086.nr21.b023583-0.las02.atlas.cogentco.com (154.24.59.26)
7   8.48 ms  144.232.181.226
8   8.48 ms  be1921.las-sagg4-1.sinap-tix.com (199.189.116.242)
9   29.14 ms 52.144.41.186
10  28.21 ms 68.232.134.117
11  29.57 ms 68.232.134.11
12  ... 13
14  28.71 ms esa.hc2781-64.iphmx.com (216.71.148.142)

OS and Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
Nmap done: 1 IP address (1 host up) scanned in 38.65 seconds