I created an Nmap script to find this on your own networks:

https://gist.github.com/jwpari/3369a537b422ecfa23f5

Use with:

  nmap -T5 -p 9200 -Pn --script=+elasticsearch-cve-2015-1427 10.0.0.0/8