Overview

ApHeMo is a network detection and health monitoring tool that looks at a network and tries to determine whether an attack is underway on the Apache web server.

The Apache web server is a server that can deliver web pages to web site visitors as they travel around a web site. The server creates or retrieves the relevant web page and then sends it back to the web visitor.

The ApHeMo software aims to keep a close eye on how the Apache server is being managed, the traffic coming and going, and what requests are being made of it to determine whether there is a security problem.

Detailed real-time logging takes place which is divided up into separate categories and can be viewed easily inside the ApHeMo program interface. There is a useful filtering system that can ignore messages that repeat and are known not to be a problem. Tools include an IP address look up and back trace on possible intruders.

There is a free and paid version. The free version includes the same features except it only recalls the last 100 lines of the log file. The paid version includes premium support and full log file access.

Installation

The installation requires 2.9 MB of available disk space to complete the process.

There was no adware, toolbars, malware or spyware included with the setup package.

ApHeMo requires Windows OS.

Interface

The interface is fairly basic and straightforward.

There is some very spartan menu options. Below them is a series of action buttons. The first three are for Log files with buttons for "FTP," "Local," and "Refresh." The second four are navigation buttons for "Accept Selected," "Accept All," 'Add to autofilter," and "Next."

There is a series of navigational tabs to see notices, warnings, debug information and other categories of messages.

Pros

• View network and local system information in real-time for security issues with the Apache web server
• Informational messages split between relevant categories like notices, warnings, debug, etc.
• Log downloads from local servers and remote FTP servers
• Errors can be validated
• WHOIS IP lookup
• Trace IP addresses of possible intruders
• Auto filter system to remove alerts about known non-issues

Cons

• Logging restricted to 100 lines for free version

Alternatives

SoftPerfect Network Scanner does a good job of scanning networks with possible intrusions and can make a good companion app to secure a network used for web hosting purposes.

Conclusion

ApHeMo is a good intrusion detection program for the Apache web server that provides extensive logging in real-time which is split into relevant categories to make the logs easier to digest.