It's from this post: https://xato.net/passwords/more-top-worst-passwords/

Although that's probably a bit out of date now. I might see if there's a newer version.