If you are running on Windows Server, there are very nice analytics built right in, that tell you a lot about who is visiting.

If you are just renting space on a server, I don't see why you would be concerned about someone other than you or the owner having access to the info. They have it.

I use statcounter on my site and have never had a problem with spam coming from them. But then again, I use my real name, post my location and email in the open. A google of my name will also bring up my HAM radio call sign (WB7QDL) which can them be googled and give a bunch of personal info on me. Maybe I'm not paranoid enough, but my call sign has been aired for nearly 40 years and anyone with a shortwave receiver, anywhere in the world can hear it if they're listening at the right time. I'm still waiting for the first bad thing to happen because of it.