The one-ip to one-ssl-host thing was solved quite some time ago with Server Name Indication[1].
You still need one cert per host, but that is a cost that could be transferred to the customer (not the user getting logged but the one wanting the log :). You can get incredibly cheap certs that would probably be appropriate for this case.