It's one of those weird situations where any right thing is also the wrong thing. Planto support direct their users to contact our support department if we drop the traffic so we kinda just unofficially let them have access for now. All the traffic comes from a single /24 so it would be trivial to block.