My own solution to this was to write a custom web server log anonymizer[1], and then feed the logs into AWStats.
My anonymizer tool uses a bloom filter to determine which IP are addresses are unique, maintaining a semi-accurate unique visitor count. User agents and referrers are also anonymized.