When running:

curl https://zabbix.domain.org/index.php

audit logs are added that shows failed login attempts for guest, even though no login attempt has been made. This adds a lot of noise when the front-end is being monitored.

I would expect it would only log failed login attempts when an actual attempt has been made.