I ran into this, too. With Plesk 12.5, when you add a rule allowing access to specific IP addresses, Plesk has started inserting a trailing rule saying to reject that access to anyone else. For example, in pseudo-code, granting access to port 22 for IP address 1.2.3.4 used to look like this...