Something compromised my VPS and I can't identify how or if it's still a problem. I did get proof from the provider from a tcpdump showing my host participating in a recent DDoS and suspect it's something that came in via a PHP exploit of some sort. So for now RioCar.org is going down till I can identify the issue and resolve it. No current ETA.

It's been a while since I've done much security side, anyone up to date on what web vulnerability scanner software is both safe to use and knows how to detect vulnerabilities in various PHP files?