DDoS are crazy cheap now, it could be a random person for the lulz, or just as a test or demo (though I suspect Codeberg aren't a bit enough target to be impressive there).

Is it because the s in iot stands for security? I'm asking genuinely. Where are these requests coming from?