Replacing my firewall rules
Solution 1:
Is it a multi-homed machine? What's on the 192.168.122.0/24 CIDR? Is there an interface listening on one of the IPs from within that range? I'd probably try to look at the output of:
grep -R 192.168.122 /etc
to find out if there's any configuration related to it and also check cron entries in /etc/cron*
Solution 2:
The address space 192.168.122 is commonly used by kvm. You can see more about this in libvirt site.
libvirt
There has all the info.