I got an alert about an SSH connection from an unusual IP from my network security team today, and when checking our ESAs, while trying to retrieve logs, I noticed a file in the initial FTP directory called ./password_words.txt
Is this a normal thing?
This appears on both our ESAs, but not our SMA
It appears to be a 1300 KB file filled with a dictionary list of common words.