Hacker leaks passwords for more than 500,000 servers, routers, and IoT devices