NMAP discovery finds 'unknown' devices on invalid ip addresses

seems to still be happening with ZCM 11.2...

Using Windows Proxy (as Primaries are SLES)

Discovery results show Nmap 'succeeded' against addresses where no device exists (i.e. no ping, etc.)

What gives?!?