Unprotected Elasticsearch servers at hackers’ mercy