Since updating to Core 138, my Firewall Logs are showing Drop_NewNotSyn TCP for 54.149.145.192 which appears to be an Amazon address.
I do NOT use Amazon. So I suspect your core 138 distro is somehow corrupted.
Since I do NOT use Amazon for anything, core 138 distro may be bad on one of your mirror sites.
But which one ???