And here... nearly identical IP addresses, but they are not the same. Downloading a similar set of Web Install cluster files. Then stops downloading and again /wp-login.php (404).
Are these "fake" Web Installs installs? Perhaps the Web Installs were stopped by the client and not the server?
Friedrich