diff --git a/network/detection/moveit-sftp-detect.yaml b/network/detection/moveit-sftp-detect.yaml
index 81e1fd800a..21af9e3a91 100644
--- a/network/detection/moveit-sftp-detect.yaml
+++ b/network/detection/moveit-sftp-detect.yaml
@@ -11,6 +11,7 @@ info:
     cwe-id: CWE-200
   metadata:
     max-request: 1
+    shodan-query: "SSH-2.0-MOVEit"
   tags: network,ssh,detect,moveit,sftp
 
 tcp: