There has been an Install Tool login attempt at TYPO3 site "{typo3.sitename}" from the IP address {normalizedParams.remoteAddress}.
The last 5 characters of the password hash tried was "{lastCharactersOfPassword}".