Comment by gregcmartin

Make sure Elastic Search is not accessible from a public IP address (this is what likely got you in the mess to begin)