OVH for me. I rent a bare metal server ($80/mo) for development and a use an OVH VM for my personal site. Their DDoS mitigation seems legit.
No warning that they would charge it, no pre-authorization, no grace period to rectify the problem, just shut down the servers at 2AM in the night.
Not happy to say the least.