Apache logs:
172.30.3.57 - - [30/Sep/2024:14:03:51 -0400] "GET /scp/login.php?do=ext&bk=oauth2.agent.p2i3 HTTP/1.1" 302 1010 "https://helpdesk.domain.com/scp/login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36 Edg/122.0.0.0"
172.30.3.57 - - [30/Sep/2024:14:04:11 -0400] "-" 408 323 "-" "-"
172.30.3.57 - - [30/Sep/2024:14:04:16 -0400] "GET /api/auth/oauth2?code=0.AS4ANgDVHVobnUqDBxQLnGxUYtXQStNoZGZFhb6RPLecmy-5AAc.AgABBAIAAADW6jl31mB3T7ugrWTT8pFeAwDs_wUA9P-B9DNznQeGv-pSx87worO0Zmp_q7jOKlkFfpt2Eh8rd4b1VbG_BTeptQZ4chpicrS5rIQBhCjk86_th2Q_ysaYL3WXYcT8ZK1uCj8lvk9VIkoUM-rGldsCtZNm4xDvj-31MhmTx9xYmXvJ6NcH20vsFPf9YCmUQnbYJMz9v4AnijCYRMRXBhwX7CvAI3BTuNTpBDmD4F4ocK26SW3fWoIKEtu8U0daDRex13OLn7hnl2Bp3rbI--kwMzjnoYSxyGGR82T40yWRHgK8ikfukVDXT2P4AOJYRAcWmTUbPowEDY-rGxsxfEnl1q5TezcD_P8wRGylD0n9LxQaAos8xVnUfoDUUfZj8_lh2Kd15m8_y1m4W3gopNlE53IZWdxipQP5_hQJEnrpi-41s9Waf15cf5x8iFoTOxxOw8Q2_lhJC1E3MBTSPq4Bx0QCqFY1R584N-NeH3FP1ZuikfzEX-OOheKDA5HdtTFU37XAW5VtNfZuqfxCDBnI_ioM_cHCaPGMjuC1Xr6aB63eBWuD_C49zPYQWKSgTtBKHL_l-Y557BIVyqh2UywNXoWeTR9FfAWa-SeGcip8VJkxPyG2eAJxzPLtuWBjfVu0f1dsJxkBXY9jopoxRWrB_65BX6IH-8Pf9O7HYzz30COyjzvReQzz-sIsZQZ6ghP6_WHn5mNmAOB4Yl_t8PLkxURpKFIl3JoVxe-D5xH0_kkLteZpKqxzHswLYAzZCK7Mlt5NfoZSJuTDpPiK4ILUcT6chCa5VpJtn1i5elFoW6JSGZaXXApojgShlE5_mKuOu50m_5Zbi7O_yxxvOF4UELckv8kET3iq4NRG3EeyeogpaJTyTFocD7pDScAi2pJRau5p_09LGATFZgLtDPSqO2EwkYTOFtuEMoO4PCAeKXjalhIyz9SD2gtBTealSIB-BtHm063tom5gnzwr9bGQkdJKmSfuDgil7ShjeWiXoL3-c4RaCvs8dUBVk7vLp7XFOg&state=cd5ce450840b16aacfad464f6739cd3b&session_state=2102b67e-5d19-47cd-a655-d43c6b229769 HTTP/1.1" 302 734 "https://login.microsoftonline.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36 Edg/122.0.0.0"
172.30.3.57 - - [30/Sep/2024:14:04:16 -0400] "GET /scp/ HTTP/1.1" 302 725 "https://login.microsoftonline.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36 Edg/122.0.0.0"
172.30.3.57 - - [30/Sep/2024:14:04:16 -0400] "GET /scp/login.php HTTP/1.1" 200 3312 "https://login.microsoftonline.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36 Edg/122.0.0.0"