NTA Source Natted

I'm fell strange for NTA on the orion. If we see below pic there are conversation from and 202.59.xxx.xxx with egress bytes 11.6 GB. The IP 202.59.xxx.xxx is our public IP, andwhy orion not showing the real client ip?

Then i try to add other NTA Collector and found this collector shown the real IP ( we can see on below pic