Is my site being attacked?

Hi

If you still need session you can Change your session config to a database type(use database table not files like that), and for stopping session entirly driver, you can remove loading session driver in 'confing/autoload.php' or your controller(if load driver in that).

RankeUP