A collegue is hosting a tor endnode on a hosted server for 30 euros/month.
But he stopped it after several TBytes.. probably after a few days only.

And the dodgy end-node that was doing MiTM attack was located in .. germany