More likely a specific botnet had it's c2 or telnet scanning report endpoint go down / get nulled on Jan 14th.