diff --git a/network/detection/aws-sftp-detect.yaml b/network/detection/aws-sftp-detect.yaml
index 3fe5eba8c0..0c03d09606 100644
--- a/network/detection/aws-sftp-detect.yaml
+++ b/network/detection/aws-sftp-detect.yaml
@@ -13,6 +13,7 @@ info:
     cwe-id: CWE-200
   metadata:
     max-request: 1
+    shodan-query: SSH-2.0-AWS_SFTP_1.1
   tags: network,ssh,detect,aws
 
 tcp: