The HTTP Status Code is: 400 Bad Request and not 403 Forbidden. That means the Ukrainian SpamBot is making a bad|malformed Request to your Login page and nothing bad is happening. The User Agent String is blank – that usually indicates a SpamBot. Any Request that is legitimate will have a valid User Agent String. Example: HTTP_USER_AGENT: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36
.
So since the bad SpamBot is making a bad Request to your website then you can just ignore these Security Log entries.