Nmap scan using default script scan and version detection fail

Question

I am running the following scan using -sC -sV on a target:

sudo nmap -sC -sV XX.XX.XX.XX

PORT    STATE SERVICE    VERSION
53/tcp  open  tcpwrapped
80/tcp  open  tcpwrapped
443/tcp open  tcpwrapped

I understand this could be a firewall or IPS at play, but since the number of ports is just 3, I would assume it is not the case. Has anyone been able to bypass the 'tcpwrapped' obfuscation?