Sounds like they figured out most of the previously unspecified traffic, comes from Linux based systems.

But you're right about an unknown amount of that traffic is from servers.