This isn’t a problem with the “sanitizing” of the fields, though I assure you they are sanitized.
I’m going to guess, the system that inserted, but with a hostID of 0 was also set to be imaged?
This was a known issue of 1.1.1, and I believe it was fixed in 1.1.2 but for sure was fixed in 1.2.0.