I still assume the issues you're facing are due to the filtered port. And in my experience it was the plc, which set it's port to filtered (mostly due to very high traffic). So you won't basically find the 500ms in this specific nmap command, since we use some tcp-dialing to display the ping there.