AkamaiGHost
tcp/80
Kestrel
tcp/443
Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.
Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.
While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.
Severity: info
Fingerprint: 5733ddf49ff49cd1f3d88d60d7a1397439e96a5f35dadf9463e3ac5f68e49a26
Public Swagger UI/API detected at path: /swagger/v1/swagger.json - sample paths:
GET /api/fund/ThreeDScanjobs/{businessUnitID}/{userId}
GET /api/fund/clients/fundsproperty/{userId}
GET /api/fund/job/portfolio/{masterId}/{userId}
GET /api/fund/jobs/{businessUnitID}/{userId}
GET /api/fund/portfolio/{businessUnitID}/{userId}
GET /api/fund/reportstype/{masterId}/{userId}
GET /api/fund/{userId}
GET /api/ping
GET /api/users/{id}
POST /api/token
POST /api/trackers/all
POST /api/trackers/capexDetail
POST /api/trackers/documents
POST /api/trackers/documentsByCapexId
POST /api/users/all
PUT /api/trackers
PUT /api/trackers/eofyReportDate
PUT /api/trackers/isTermAccepted
PUT /api/users/LastLogonUpdated
PUT /api/users/policyaccepted
Open service 45.60.198.249:443 · api.tops.cbre.com.au
2026-01-02 03:06
HTTP/1.1 503 Service Unavailable Retry-After: 5 Content-Type: text/html Cache-Control: no-cache, no-store Connection: close Content-Length: 887 X-Iinfo: 6-74869856-0 NNNN RT(1767323203701 35) q(0 0 -1 1) r(150 -1) b6 U24 Strict-Transport-Security: max-age=31536000 Set-Cookie: visid_incap_3068345=3xMoJZu8SFyrKwP3sxycGEM2V2kAAAAAQUIPAAAAAADCaqfU8G3sH3USvRuCfzLg; expires=Fri, 01 Jan 2027 07:16:26 GMT; HttpOnly; path=/; Domain=.tops.cbre.com.au; Secure; SameSite=None Set-Cookie: incap_ses_1251_3068345=6+vicacXbxizYRILXXJcEVI2V2kAAAAA7xEkW8AjooBucSKkpcEwnw==; path=/; Domain=.tops.cbre.com.au; Secure; SameSite=None <html style="height:100%"><head><META NAME="ROBOTS" CONTENT="NOINDEX, NOFOLLOW"><meta name="format-detection" content="telephone=no"><meta name="viewport" content="initial-scale=1.0"><meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1"><script type="text/javascript" src="/_Incapsula_Resource?SWJIYLWA=719d34d31c8e3a6e6fffd425f7e032f3"></script></head><body style="margin:0px;height:100%"><iframe id="main-iframe" src="/_Incapsula_Resource?CWUDNSAI=26&xinfo=6-74869856-0%20NNNN%20RT%281767323203701%2035%29%20q%280%200%20-1%201%29%20r%28150%20-1%29%20b6%20U24&incident_id=1251000540445434291-369444290790886790&edet=20&cinfo=ffffffffe6b3&rpinfo=0&connaid=1045918108&cip=159.89.127.165&mth=GET" frameborder=0 width="100%" height="100%" marginheight="0px" marginwidth="0px">Request unsuccessful. Incapsula incident ID: 1251000540445434291-369444290790886790</iframe></body></html>
Open service 2a02:26f0:3500:14::1724:a24e:80 · api.tops.cbre.com.au
2026-01-01 13:52
HTTP/1.1 301 Moved Permanently Server: AkamaiGHost Content-Length: 0 Location: https://api.tops.cbre.com.au/ Expires: Thu, 01 Jan 2026 13:52:55 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Thu, 01 Jan 2026 13:52:55 GMT Connection: close Akamai-GRN: 0.0ea02417.1767275575.7e8b5170
Open service 2.16.183.18:443 · api.tops.cbre.com.au
2026-01-01 13:52
HTTP/1.1 301 Moved Permanently Content-Length: 0 Server: Kestrel Location: index.html Expires: Thu, 01 Jan 2026 13:52:53 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Thu, 01 Jan 2026 13:52:53 GMT Connection: close Alt-Svc: h3=":443"; ma=93600 Akamai-GRN: 0.d21d1002.1767275573.94100be7 Strict-Transport-Security: max-age=86400
Open service 2.16.183.20:80 · api.tops.cbre.com.au
2026-01-01 13:52
HTTP/1.1 301 Moved Permanently Server: AkamaiGHost Content-Length: 0 Location: https://api.tops.cbre.com.au/ Expires: Thu, 01 Jan 2026 13:52:55 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Thu, 01 Jan 2026 13:52:55 GMT Connection: close Akamai-GRN: 0.d41d1002.1767275575.e8a093e9
Open service 2a02:26f0:3500:14::1724:a24f:80 · api.tops.cbre.com.au
2026-01-01 13:52
HTTP/1.1 301 Moved Permanently Server: AkamaiGHost Content-Length: 0 Location: https://api.tops.cbre.com.au/ Expires: Thu, 01 Jan 2026 13:52:55 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Thu, 01 Jan 2026 13:52:55 GMT Connection: close Akamai-GRN: 0.0fa02417.1767275575.7881e827
Open service 2.16.183.18:80 · api.tops.cbre.com.au
2026-01-01 13:52
HTTP/1.1 301 Moved Permanently Server: AkamaiGHost Content-Length: 0 Location: https://api.tops.cbre.com.au/ Expires: Thu, 01 Jan 2026 13:52:55 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Thu, 01 Jan 2026 13:52:55 GMT Connection: close Akamai-GRN: 0.d21d1002.1767275575.941020e8
Open service 2a02:26f0:3500:14::1724:a24e:443 · api.tops.cbre.com.au
2026-01-01 13:52
HTTP/1.1 301 Moved Permanently Content-Length: 0 Server: Kestrel Location: index.html Expires: Thu, 01 Jan 2026 13:52:53 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Thu, 01 Jan 2026 13:52:53 GMT Connection: close Alt-Svc: h3=":443"; ma=93600 Akamai-GRN: 0.0ea02417.1767275572.7e8b38e0 Strict-Transport-Security: max-age=86400
Open service 2.16.183.20:443 · api.tops.cbre.com.au
2026-01-01 13:52
HTTP/1.1 301 Moved Permanently Content-Length: 0 Server: Kestrel Location: index.html Expires: Thu, 01 Jan 2026 13:52:53 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Thu, 01 Jan 2026 13:52:53 GMT Connection: close Alt-Svc: h3=":443"; ma=93600 Akamai-GRN: 0.d41d1002.1767275572.e8a062d1 Strict-Transport-Security: max-age=86400
Open service 2a02:26f0:3500:14::1724:a24f:443 · api.tops.cbre.com.au
2026-01-01 13:52
HTTP/1.1 301 Moved Permanently Content-Length: 0 Server: Kestrel Location: index.html Expires: Thu, 01 Jan 2026 13:52:53 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Thu, 01 Jan 2026 13:52:53 GMT Connection: close Alt-Svc: h3=":443"; ma=93600 Akamai-GRN: 0.0fa02417.1767275572.7881cfca Strict-Transport-Security: max-age=86400
Open service 2.16.183.20:443 · api.tops.cbre.com.au
2025-12-22 16:43
HTTP/1.1 301 Moved Permanently Content-Length: 0 Server: Kestrel Location: index.html Expires: Mon, 22 Dec 2025 16:43:04 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Mon, 22 Dec 2025 16:43:04 GMT Connection: close Alt-Svc: h3=":443"; ma=93600 Akamai-GRN: 0.d21d1002.1766421784.306f5fb8 Strict-Transport-Security: max-age=86400
Open service 2a02:26f0:7100::210:11a:80 · api.tops.cbre.com.au
2025-12-22 16:43
HTTP/1.1 301 Moved Permanently Server: AkamaiGHost Content-Length: 0 Location: https://api.tops.cbre.com.au/ Expires: Mon, 22 Dec 2025 16:43:06 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Mon, 22 Dec 2025 16:43:06 GMT Connection: close Akamai-GRN: 0.16011002.1766421786.e717201
Open service 2.16.183.18:443 · api.tops.cbre.com.au
2025-12-22 16:43
HTTP/1.1 301 Moved Permanently Content-Length: 0 Server: Kestrel Location: index.html Expires: Mon, 22 Dec 2025 16:43:05 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Mon, 22 Dec 2025 16:43:05 GMT Connection: close Alt-Svc: h3=":443"; ma=93600 Akamai-GRN: 0.d41d1002.1766421783.4735c448 Strict-Transport-Security: max-age=86400
Open service 2a02:26f0:7100::210:179:443 · api.tops.cbre.com.au
2025-12-22 16:43
HTTP/1.1 301 Moved Permanently Content-Length: 0 Server: Kestrel Location: index.html Expires: Mon, 22 Dec 2025 16:43:03 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Mon, 22 Dec 2025 16:43:03 GMT Connection: close Alt-Svc: h3=":443"; ma=93600 Akamai-GRN: 0.16011002.1766421783.e716b33 Strict-Transport-Security: max-age=86400
Open service 2a02:26f0:7100::210:179:80 · api.tops.cbre.com.au
2025-12-22 16:43
HTTP/1.1 301 Moved Permanently Server: AkamaiGHost Content-Length: 0 Location: https://api.tops.cbre.com.au/ Expires: Mon, 22 Dec 2025 16:43:05 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Mon, 22 Dec 2025 16:43:05 GMT Connection: close Akamai-GRN: 0.75011002.1766421785.1220a850
Open service 2.16.183.18:80 · api.tops.cbre.com.au
2025-12-22 16:43
HTTP/1.1 301 Moved Permanently Server: AkamaiGHost Content-Length: 0 Location: https://api.tops.cbre.com.au/ Expires: Mon, 22 Dec 2025 16:43:05 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Mon, 22 Dec 2025 16:43:05 GMT Connection: close Akamai-GRN: 0.d21d1002.1766421785.306f66a6
Open service 2.16.183.20:80 · api.tops.cbre.com.au
2025-12-22 16:43
HTTP/1.1 301 Moved Permanently Server: AkamaiGHost Content-Length: 0 Location: https://api.tops.cbre.com.au/ Expires: Mon, 22 Dec 2025 16:43:05 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Mon, 22 Dec 2025 16:43:05 GMT Connection: close Akamai-GRN: 0.d41d1002.1766421785.4735dbcf
Open service 2a02:26f0:7100::210:11a:443 · api.tops.cbre.com.au
2025-12-22 16:43
HTTP/1.1 301 Moved Permanently Content-Length: 0 Server: Kestrel Location: index.html Expires: Mon, 22 Dec 2025 16:43:04 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Mon, 22 Dec 2025 16:43:04 GMT Connection: close Alt-Svc: h3=":443"; ma=93600 Akamai-GRN: 0.75011002.1766421783.1220a189 Strict-Transport-Security: max-age=86400
Open service 45.60.198.249:443 · api.tops.cbre.com.au
2025-12-22 15:42
HTTP/1.1 503 Service Unavailable Retry-After: 5 Content-Type: text/html Cache-Control: no-cache, no-store Connection: close Content-Length: 884 X-Iinfo: 11-60512321-0 NNNN RT(1766418129988 5) q(0 0 -1 0) r(150 -1) b6 U24 Strict-Transport-Security: max-age=31536000 Set-Cookie: visid_incap_3068345=QBv1O1hQT+mqNIflUG7hJNFmSWkAAAAAQUIPAAAAAAAzArF0UNUo1ForrclSFfpt; expires=Mon, 21 Dec 2026 23:06:41 GMT; HttpOnly; path=/; Domain=.tops.cbre.com.au; Secure; SameSite=None Set-Cookie: incap_ses_1515_3068345=aThjYbZJ9wxYoMRM3VwGFeBmSWkAAAAAaZv7jk80gy6QzqJf12MvAg==; path=/; Domain=.tops.cbre.com.au; Secure; SameSite=None <html style="height:100%"><head><META NAME="ROBOTS" CONTENT="NOINDEX, NOFOLLOW"><meta name="format-detection" content="telephone=no"><meta name="viewport" content="initial-scale=1.0"><meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1"><script type="text/javascript" src="/_Incapsula_Resource?SWJIYLWA=719d34d31c8e3a6e6fffd425f7e032f3"></script></head><body style="margin:0px;height:100%"><iframe id="main-iframe" src="/_Incapsula_Resource?CWUDNSAI=26&xinfo=11-60512321-0%20NNNN%20RT%281766418129988%205%29%20q%280%200%20-1%200%29%20r%28150%20-1%29%20b6%20U24&incident_id=1515000430202232920-304622007267035851&edet=20&cinfo=ffffffff26b3&rpinfo=0&connaid=392765829&cip=138.68.86.32&mth=GET" frameborder=0 width="100%" height="100%" marginheight="0px" marginwidth="0px">Request unsuccessful. Incapsula incident ID: 1515000430202232920-304622007267035851</iframe></body></html>