diff --git a/network/detection/aix-websm-detect.yaml b/network/detection/aix-websm-detect.yaml
index 8bdd140648..a9292abd05 100644
--- a/network/detection/aix-websm-detect.yaml
+++ b/network/detection/aix-websm-detect.yaml
@@ -11,6 +11,7 @@ info:
   metadata:
     max-request: 1
     verified: true
+    shodan-query: "/websm/"
   tags: network,aix,detect
 
 tcp:
@@ -29,4 +30,4 @@ tcp:
         words:
           - "/var/websm/"
           - "startNewWServer"
-          - "WServer.HANDSHAKING"
+        condition: and