← Baltic Sonar · Methodology & trust
Every source below is public and carries a credibility class (see methodology). The weight is a starting point by class; it is combined with corroboration across independent editorial groups, so five outlets from one newsroom count as one confirmation, not five. Class D/E/P sources cannot raise the threat level on their own; the classes below are the ones that currently hold at least one registered feed, and a class absent from this page holds none.
Corroborated = share of this source's events that ≥2 independent editorial groups also reported (newsrooms collapsed, aggregators excluded) — the same definition as the Coverage & Confidence panel on the front page, so the two numbers agree. It is low across the board, and that is the honest picture. Auto-attributed = share our classifier marked CONFIRMED / HIGHLY_LIKELY. That is a machine guess about who was behind it, not a confirmation that the event happened, and it is shown in its own column precisely so it is never mistaken for one.
| Sensor | What it measures | Data | Last | Why it matters |
|---|---|---|---|---|
| Military aviation (ADS-B, adsb.lol) | Allied military aircraft that transmit a transponder | 9557 observations | 2026-10-15 18:54 | Measures allied presence, not Russian activity — feeds resilience, not threat |
| Vessel behaviour (AIS, Finnish Digitraffic) | Position reports for hulls in the Baltic; loitering near cable and pipeline routes | 7278873 position reports | 2026-10-15 19:00 | The behaviour is what is measured. A hull's presence in any sanctions or shadow-fleet registry is a separate fact about the hull and never explains the behaviour |
| GNSS degradation (GPSJam) | Share of aircraft per map cell reporting poor navigation accuracy | 45 daily grids | 2026-10-14 | Degradation is measured; the cause — jamming, spoofing or space weather — is not established. Cells with fewer than 8 transmitting aircraft are excluded. ~1-day lag |
| Navigation aids (Digitraffic ATON) | Finnish buoys, beacons, leading marks and racons reported faulty | 1026 readings | 2026-10-15 19:05 | Ice, storms, vessel contact and wear are the ordinary causes; unlit lights are routine |
| Port calls (Digitraffic) | Vessel arrivals and departures at Finnish ports | 3054 readings | 2026-10-15 19:05 | Traffic context — a quiet port is a market or weather fact before it is anything else |
| Rail Finland–Russia | Scheduled cross-border rail services and cancellations | 3081 readings | 2026-10-15 19:05 | A cancelled train is a schedule fact; no cause is asserted |
| BGP routing (RIPE RIS) | Global visibility of 11 Baltic critical networks | 38 snapshots · 38 networks | 2026-10-15 19:00 | A drop is flagged only against each network's own baseline; cause never asserted |
| Ransomware leak sites (ransomware.live) | Baltic organisations named on extortion sites | 6 listings | 2026-10-10 20:42 | The listing is a fact; the claimed breach scope is the criminals' assertion |
| Seismic (EMSC) | Seismic events in the Baltic Sea area | 3 events | 2026-06-02 18:50 | Underwater explosions leave a seismic signature |
| Airspace (OpenSky) · Internet (IODA) · Geomagnetic (NOAA Kp) | Continuously polled context sensors | monitored | live | Confounder control — e.g. a geomagnetic storm can explain GNSS degradation that would otherwise look like jamming |
| Elering (Estonian TSO) class A | EstLink 1 & 2 flow, Balticconnector gas flow and pressure, Estonian system frequency | 20958 readings | 2026-10-15 17:55 | The asset’s own operator measuring its own asset — an AIS loitering alert near EstLink can be checked against a real interconnector measurement in the same window. Flow follows the electricity market, so zero flow can be a price spread or maintenance; no cause is asserted. |
OpenSanctions — Maritime · 23636 rows · version 20261014150330-jrf · refreshed daily · opensanctions.org · licence CC BY-NC 4.0 (not part of our CC BY open data).
This is not a source class of its own. It aggregates listings made by many different bodies, and the credibility belongs to the body that made the listing, not to the aggregator: class A for EU / OFAC / UK / UN designations and port-state-control detentions, class C for research listings (RUSI Project Sandstone) and for the Ukrainian NACP “War & Sanctions” portal. The NACP portal is official, but it is kept by a party to the conflict, so it is marked as such and can never on its own raise our confidence in anything (§5).
What this registry is not: it records listings and detentions, not vessels suspected in incidents, and it has no predictive power. EAGLE S — the vessel whose anchor cut EstLink 2 — is in it (7 rows by IMO). NEWNEW POLAR BEAR and YI PENG 3, both central to earlier Baltic cable incidents, return zero rows. A hull being absent here means nothing, and a hull being present here explains nothing about its behaviour.
The five listing types are kept apart and never collapsed into one “sanctioned” badge: sanctions designation, port-state-control detention (a ship-condition finding, not a security allegation), regulatory warning, shadow-fleet listing, vessel of interest. Merging them would roughly quadruple the apparent picture.
| Source | Area | Lang | Weight | Items | Corroborated | Auto-attributed | Last seen |
|---|---|---|---|---|---|---|---|
| MeteoAlarm Finland | FI | en | 92 | 4504 | 100% | 100% | 2026-10-15 19:00 |
| MeteoAlarm Estonia | EE | en | 92 | 2328 | 49% | 100% | 2026-10-15 19:00 |
| MeteoAlarm Latvia | LV | en | 92 | 1723 | 53% | 100% | 2026-10-15 19:00 |
| EU Commission Press (RAPID) | multi | en | 92 | 313 | — | — | 2026-10-15 19:00 |
| Cloudflare Status | multi | en | 92 | 241 | — | — | 2026-10-15 19:00 |
| MeteoAlarm Lithuania | LT | en | 92 | 146 | 56% | 100% | 2026-10-15 19:00 |
| Estonia MFA | EE | en | 92 | 122 | 12% | 98% | 2026-10-15 19:00 |
| Latvia MFA | LV | en | 92 | 89 | 0% | 100% | 2026-10-15 19:00 |
| Riigikogu (Estonia Parliament) | EE | en | 92 | 64 | 0% | 100% | 2026-10-15 19:00 |
| European Central Bank | multi | en | 92 | 58 | — | — | 2026-10-15 19:00 |
| CERT.LV | LV | lv | 92 | 57 | 0% | 100% | 2026-10-15 19:00 |
| MCF Sweden (Civil Defence) | SE | sv | 92 | 54 | — | — | 2026-10-15 19:00 |
| Europol | multi | en | 92 | 53 | — | — | 2026-10-15 19:00 |
| CERT Polska | PL | en | 92 | 48 | — | — | 2026-10-15 19:00 |
| CERT-EE / RIA | EE | et | 92 | 42 | 0% | 100% | 2026-10-15 19:00 |
| Frontex | multi | en | 92 | 39 | — | — | 2026-10-15 19:00 |
| EASA (EU Aviation Safety) | multi | en | 92 | 35 | — | — | 2026-10-15 19:00 |
| Estonia MOD | EE | en | 92 | 32 | 3% | 100% | 2026-10-15 19:00 |
| CERT-SE | SE | sv | 92 | 31 | — | — | 2026-10-15 19:00 |
| NCSC-FI (Traficom) | FI | en | 92 | 29 | — | — | 2026-10-15 19:00 |
| Finnish Border Guard | FI | en | 92 | 28 | 0% | 100% | 2026-10-15 19:00 |
| Elering (EE TSO) | EE | et | 92 | 18 | 0% | 100% | 2026-09-24 09:00 |
| NATO ENSEC COE (Vilnius) | LT | en | 92 | 17 | — | — | 2026-10-15 19:00 |
| Norway PST | multi | sv | 92 | 15 | — | — | 2026-10-15 19:00 |
| EMSA (EU Maritime Safety) | multi | en | 92 | 14 | — | — | 2026-10-15 19:00 |
| Estonia Defence Forces | EE | en | 92 | 14 | 0% | 100% | 2026-10-15 19:00 |
| Google Cloud Status | multi | en | 92 | 13 | — | — | 2026-10-15 19:00 |
| Source | Area | Lang | Weight | Items | Corroborated | Auto-attributed | Last seen |
|---|---|---|---|---|---|---|---|
| Ilta-Sanomat FI | FI | fi | 78 | 8905 | 4% | 67% | 2026-10-15 19:00 |
| LRT Lithuania LT | LT | lt | 78 | 7857 | 6% | 83% | 2026-10-15 19:00 |
| ERR Estonia ET | EE | et | 78 | 5227 | 6% | 75% | 2026-10-15 19:00 |
| Helsingin Sanomat | FI | fi | 78 | 4895 | 8% | 54% | 2026-10-15 19:00 |
| LSM Latvia LV | LV | lv | 78 | 3677 | 6% | 79% | 2026-10-15 19:00 |
| ERR Estonia RU | EE | ru | 78 | 3293 | 3% | 78% | 2026-10-15 19:00 |
| Yle Finland EN | FI | en | 78 | 2821 | 0% | 71% | 2026-10-15 19:00 |
| SVT Sweden | SE | sv | 78 | 1858 | 0% | 83% | 2026-10-15 19:00 |
| Verslo žinios (LT business daily) | LT | lt | 78 | 1801 | 17% | 84% | 2026-10-15 19:00 |
| Kyiv Independent | multi | en | 78 | 1054 | 5% | 69% | 2026-10-15 19:00 |
| ERR Estonia EN | EE | en | 78 | 990 | 4% | 80% | 2026-10-15 19:00 |
| DataCenterDynamics | multi | en | 78 | 883 | — | — | 2026-10-15 19:00 |
| DR Udland (Denmark) | multi | da | 78 | 808 | 20% | 60% | 2026-10-15 19:00 |
| Notes RU-EU | multi | en | 78 | 706 | 0% | 67% | 2026-10-15 19:00 |
| LSM Latvia EN | LV | en | 78 | 542 | 4% | 94% | 2026-10-15 19:00 |
| The Local Sweden | SE | en | 78 | 387 | — | — | 2026-10-15 19:00 |
| Defence24 | PL | en | 78 | 339 | 4% | 77% | 2026-10-15 19:00 |
| LRT Lithuania EN | LT | en | 78 | 319 | 9% | 86% | 2026-10-15 19:00 |
| InfoSecurity24 (PL) | PL | pl | 78 | 285 | 10% | 80% | 2026-10-15 19:00 |
| Baltic Times | multi | en | 78 | 255 | 10% | 90% | 2026-10-15 19:00 |
| Notes from Poland | PL | en | 78 | 118 | 14% | 57% | 2026-10-15 19:00 |
| Data Center Knowledge | multi | en | 78 | 99 | — | — | 2026-10-15 19:00 |
| Baltic Sentinel | multi | en | 78 | 48 | 0% | 81% | 2026-10-15 19:00 |
| Emerging Europe | multi | en | 78 | 48 | — | — | 2026-10-15 19:00 |
| Šiaulių kraštas (LT regional) | LT | lt | 78 | 45 | — | — | 2026-10-15 19:00 |
| Source | Area | Lang | Weight | Items | Corroborated | Auto-attributed | Last seen |
|---|---|---|---|---|---|---|---|
| Meduza EN | RU | en | 68 | 940 | 7% | 58% | 2026-10-15 19:00 |
| The Maritime Executive | multi | en | 68 | 659 | 0% | 60% | 2026-10-15 19:00 |
| Moscow Times | RU | en | 68 | 390 | 19% | 78% | 2026-10-15 19:00 |
| The Insider (RU investigative) | RU | en | 68 | 270 | 0% | 8% | 2026-10-15 19:00 |
| Atlantic Council | multi | en | 68 | 225 | — | — | 2026-10-15 19:00 |
| Naval News | multi | en | 68 | 145 | 0% | 100% | 2026-10-15 19:00 |
| SWP Berlin | multi | en | 68 | 106 | — | — | 2026-10-15 19:00 |
| CEPA | multi | en | 68 | 99 | — | — | 2026-10-15 19:00 |
| SubTel Forum (subsea cable) | multi | en | 68 | 80 | — | — | 2026-10-15 19:00 |
| OSW Warsaw (Eastern studies) | PL | en | 68 | 61 | — | — | 2026-10-15 19:00 |
| RUSI | multi | en | 68 | 58 | — | — | 2026-10-15 19:00 |
| ICDS Estonia (defence think tank) | EE | en | 68 | 41 | 0% | 91% | 2026-10-15 19:00 |
| Clingendael (NL) | multi | en | 68 | 36 | — | — | 2026-10-15 19:00 |
| DFRLab (OSINT/disinfo) | multi | en | 68 | 24 | 0% | 80% | 2026-10-15 19:00 |
| Jamestown (Europe) | multi | en | 68 | 22 | — | — | 2026-10-15 19:00 |
| Bellingcat (OSINT verification) | multi | en | 68 | 17 | — | — | 2026-10-15 19:00 |
| SCEEUS (Stockholm E. Europe studies) | SE | en | 68 | 17 | — | — | 2026-10-15 19:00 |
| FIIA (Finland) | FI | en | 68 | 14 | — | — | 2026-10-15 19:00 |
| EU Parliament Think Tank | multi | en | 68 | 10 | — | — | 2026-10-15 19:00 |
| Re:Baltica (LV investigative) | LV | en | 68 | 10 | — | — | 2026-10-15 19:00 |
Generated 2026-10-15 19:00 UTC · “Awareness is power.”