diff --git a/network/detection/dropbear-cbc-ciphers.yaml b/network/detection/dropbear-cbc-ciphers.yaml
index 5aa3f4ba42..706f72f47c 100644
--- a/network/detection/dropbear-cbc-ciphers.yaml
+++ b/network/detection/dropbear-cbc-ciphers.yaml
@@ -27,3 +27,4 @@ network:
       - type: word
         words:
           - "cbc"
+          - "SSH-"