When you say "no matter which host I scan", are you scanning your own hosts or external servers? Could you include some sample nmap
commands that you have run to get thee results in your question, to make this clearer?
If all external hosts that are showing these ports as open then it is likely that your VPS provider is transparently redirecting those ports so connections to any external host from any of its VPS customers go to one of their servers (which has the ports open for logging). It is not uncommon for hosts to have "no IRC" and similar rules, and redirecting traffic on common ports for the banned protocols would be a good way to enforce such a rule (and log machines that try to use the protocols, such as those that have been broken into and joined to a botnet). Of course, it may also be something in your VM's configuration that is redirecting the traffic but that is less likely (you'd know if you had done it, and I can't think of a reason why malicious code/people would want to tweak things that way behind your back).
If it is all your hosts/addresses that have the ports open this it is a different kettle of fish, and Mark's suggestion of netstat -tap
to see if there are specific processes on your machines actively listening on these ports is your next diagnostic step.