Not exactly hosting, but their IP addresses were used in the Tor network.
In theory, they describe themselves as a cyber security company, but they also seem to be looking for vulnerabilities not only in their clients, because their IP addresses appear on blacklists.
ASN: AS57860