RT-AC68U triggering dianaea honeypot, probing 80 and 139 after firmware update

Ever since updating my firmware to 3.0.0.4.380_1842-g7414eb9 2 days ago, I'm getting attempts for TCP connections on port 80 and 139 from 192.168.1.1 (the router ip) to a dionaea honeypot.

I've just noticed this after updating my firmware to 3.0.0.4.380_1842-g7414eb9 2 days ago.

For example, I collected these 'attacks' over the last hour:

timestamp: 2016-03-04T04:55:03.882000
local_host: 192.168.1.108
local_port: 80
remote_host: 192.168.1.1
remote_port: 38474
remote_hostname:

timestamp:...

RT-AC68U triggering dianaea honeypot, probing 80 and 139 after firmware update