Artifact deletion events in system feeds are reported as having the user id and IP address that was used during deployment

I deploy an artifact into a repository with user ID "deployment", from IP address "192.168.1.70"

The file 'project_a-5.0.jar' in repository 'Releases' with path '/test/project_a/5.0/project_a-5.0.jar' was deployed into Nexus.Action was initialized by user deployment.
Request was originated from IP address 192.168.1.70.

I delete the artifact from machine with IP address "192.168.1.64" using user ID "foo":

The file 'project_a-5.0.jar' in repository 'Releases' with path '/test/project_a/5.0/project_a-5.0.jar' was deleted from Nexus.Action was initialized by user deployment.
Request was originated from IP address 192.168.1.70.

This doesn't seem right...