Maybe this is far fetched but anyway...

They were trying to do a fingerprint of your system like you can read in this article I found a while ago

Or they just where trying to find a system with the port 53 open to intercept DNS-requests or something.

anyway I'm not an expert ...yet