Assuming it was intentional, just trying the waters. Testing what the response is, who actually responds versus who's willing to sweep the incident under the carpet, how hard any response is and how quickly it happens, how much of the internet infrastructure is affected for how long, etc... etc... that's a lot of useful information as preparation for an actual attack.