The sheer number of those "." queries compared to the others makes me suspect something else going on.
Could you post output for below pls?
sudo grep 'query\[.* \. ' /var/log/pihole/pihole.log* | tail
FYI, those "." queries are popular for DDoS-ing: