diff --git a/network/misconfig/unauth-psql.yaml b/network/misconfig/unauth-psql.yaml
index 8b7cd6616e..cbe4f4cceb 100644
--- a/network/misconfig/unauth-psql.yaml
+++ b/network/misconfig/unauth-psql.yaml
@@ -37,8 +37,10 @@ tcp:
         condition: and
 
       - type: word
+        part: raw
         words:
           - "FTP"
           - "HTTP"
+          - "500"
         condition: or
         negative: true