diff --git a/network/detection/xlight-ftp-service-detect.yaml b/network/detection/xlight-ftp-service-detect.yaml
index 6196face78..c2092d2355 100644
--- a/network/detection/xlight-ftp-service-detect.yaml
+++ b/network/detection/xlight-ftp-service-detect.yaml
@@ -19,6 +19,12 @@ network:
       - "{{Hostname}}"
       - "{{Host}}:21"
 
+    matchers:
+      - type: word
+        part: body
+        words:
+          - "Xlight FTP Server"
+
     extractors:
       - type: regex
         regex: