And of course, again a /wp-login.php (404).
The wp-login.php attempt is from 191.248.106.65. The .bin file requests are from 47.13.117.202. These are totally unrelated.