It could be a lot of "AI Agent" traffic getting detected as GNU/Linux use for all we know.