If you need an easy to use and deploy HIDS, I highly recommend OSSEC, https://bitbucket.org/dcid/ossec-hids. Trend-micro funds and supports this software, so if you need support it is available. It will allow you to monitor any log file and actively perform certain actions such as blocking a bad ip address with default as well as custom rules.