Over 4,000 insecure Elasticsearch servers have been hosting the point-of-sale malware Alina and JackPoS.

https://threatpost.com/thousands-of-elasticsearch-servers-hijacked-to-host-pos-malware/127965/