GRAIN TRAIL: TRACKING RUSSIA’S GHOST SHIPS WITH SATELLITE IMAGERY

May 11, 2023

Bellingcat

The main grain terminal at the Port of Sevastopol in occupied Crimea has fallen quiet in recent years – at least according to ship monitoring services.

Automated Identification Systems (AIS) tracking data, which provides open source information on the positioning and movement of ships, shows few vessels visiting the Avlita grain terminal since Russia annexed Crimea from Ukraine in 2015.

International sanctions on the city of Sevastopol and the Avlita terminal (which has also been referred to as Aval in some media reports and registers) could explain why traffic has seemingly been so low.

But other open sources paint a radically different picture of events at the terminal.

Satellite imaging services such as Planet, social media posts and a new Synthetic Aperture Radar (SAR) tool built as part of Bellingcat’s Tech Fellowship scheme, show that vessels have in fact covertly continued to make regular visits.

Bellingcat identified at least 179 days in the first 12 months of Russia’s full-scale invasion where ships had been present at the Avlita terminal with their AIS transponders seemingly turned off.

This appears to support the findings of several media reports that claimed activity at the terminal has continued apace.

The Financial Times, Bloomberg, CNN, Reuters, the BBC, the Wall Street Journal and Associated Press have all reported on apparent grain exports at the terminal since the onset of Russia’s full-scale invasion, even highlighting some of the ships involved. Some have even pointed to evidence the terminal has been used as an exit point for grain taken from areas of occupied Ukraine, something Ukrainian ministers have claimed is “outright robbery” but which Russia denies.

Yet despite this coverage, many details about operations at the terminal remain unknown or are undocumented.

For example, the SeaKrime monitoring project of Ukrainian activist group Mytrovorets has published a list of ships it says have visited the Avlita Terminal to export stolen grain. However, only a handful of vessels on this list are documented with accompanying imagery. And while media reports have raised the issue, most have focussed on individual ships or incidents rather than providing a full account of the scale of the operation.

Bellingcat can now add further details about the frequency of ship visits to the Avlita terminal over the first year of Russia’s invasion, as well as help identify more dates when ships were present there.

Satellite imagery service Planet provided Bellingcat with access to imagery over the first 12 months of Russia’s full-scale invasion.

In total, there are 148 days that ships appear to have been present at the terminal, based on Planet imagery alone. With the permission of Planet, Bellingcat is publishing each of these images.

Bellingcat has also been able to identify a further 31 days when ships were present at the terminal thanks to a Ship Detection Tool (SDT) that utilises synthetic aperture radar captured by the European Space Agency’s Sentinel-1 satellite, providing extra coverage when optical satellite imagery is not available.

Bellingcat is also sharing all SDT images to allow open source researchers to further investigate the vessels and the path of potential grain exports from Sevastopol.

According to Katerina Yaresko, an analyst who has provided data for the SeaKrime project, most countries have begun refusing to accept grain that can be proven to come from Crimea following media reports about the issue. However, she added that some vessels are still travelling to ports in Syria.

So called ship-to-ship transfers, meanwhile, remain an ongoing issue primarily in the Kerch Strait between Russia and Crimea, she added. Reports by Bloomberg and the Wall Street Journal previously detailed this issue, which sees vessels load grain in Sevastopol before transferring that cargo to another grain-carrying vessel out at sea. This process can help obscure the true origin of the grain.

Bridget Diakun, a reporter who specialises in ship tracking at the shipping news journal Lloyd’s List told Bellingcat that the identity of some ships operating out of the Avlita terminal are now known (including those on a US State Department list reported by the New York Times) – but much is to still to be confirmed about the operation.

“It’s complex,” Diakun said, not least because of the aforementioned ship-to-ship transfer issue.

Diakun explained that there appears to be a fleet of vessels involved in grain export activities at the port, with some heading south towards the Bosphorus and others east towards the Kerch Strait where the grain transfers occur.

Satellite imagery, however, can help illuminate what has been happening, she added.

The Planet satellite imagery shared with Bellingcat provides a clearer picture of events at the Avlita terminal during the first year of Russia’s full-scale invasion.

These images can be cross-referenced with ship lists including those published by Yaresko on her social media channels and by the SeaKrime project. Footage from ship-spotters including Yörük Işık, who monitors ships passing through the Bosphorus, can help triangulate the movement of vessels that have switched off their AIS transponders.

For example, on 24 July 2022, social media reports and the SeaKrime project claimed that a ship named the Mikhail Nenashev had docked at the grain terminal.

Five days later, social media images posted by Yörük Işık showed a ship named the Matros Pozynich as it moved through the Bosphorus. The appearance of this ship appeared consistent with the ship seen in satellite imagery at the Avlita terminal in the days prior.

AIS data visible on MarineTraffic shows that the Matros Pozynich had been visible in the Black Sea, just south of Crimea on February 14. However, the AIS notifications then stopped before reappearing on February 23 as the vessel headed south towards the Bosphorus.

The owner of the Matros Pozynich is listed as Crane Marine Contractor (CMC) by the Equasis shipping database. CMC was also listed by Equasis as the owner of the Mikhail Nenashev until February 2023. CMC did not respond to Bellingcat’s emailed questions asking whether either vessel docked at the Avlita terminal on the dates mentioned, what they were carrying and why their AIS transponders appeared to have been switched off when in Sevastopol. A call by Bellingcat to the CMC office was answered, but the respondent immediately hung up when they heard the topic of our investigation.

Further resources to triangulate the movement of ships to and from Sevastopol’s grain terminal include the accounts of Yaresko and open source researcher MT Anderson, as well as Yörük Işık. AIS data from the likes of MarineTraffic, Spire or VesselFinder is also revealing, whether it displays the exact positioning of a ship or the time period that AIS is switched off. Other satellite imagery of the vessels either at sea or at other ports (should they be available) could also potentially be used to make visual comparisons.

Although an incredibly valuable and illuminating resource, it must be noted that there can still be some black spots in optical satellite imagery coverage. Visibility is limited when it’s dark and cloudy. Satellite revisit times (the time between satellite image captures of the same location) also mean full coverage is not always possible.

But peering beyond the clouds and boosting coverage is achievable with the right research techniques.

Bellingcat employed a Ship Detection Tool that uses publicly available Synthetic Aperture Radar (SAR) imagery – generated when the European Space Agency’s Sentinel-1 satellite sends out a pulse of radio waves – to gather information about the Avlita terminal.

The tool was developed as part of Bellingcat’s Tech Fellowship scheme.

Bellingcat is also listing each day the SDT documented a ship at the Avlita Terminal.

While the picture generated by the SDT is very different from the optical imagery provided by other satellite imagery services, it is no less effective in confirming the presence, or absence, of a ship.

Instead of relying on reflected sunlight like optical satellites, Sentinel-1 sends a pulse of radio waves and uses the echo generated to gather information and create a picture. As well as piercing through clouds, radio waves can also display what’s going on at night.

This is similar to the way a bat uses sonar to “see” in the dark: by emitting calls and listening to echoes.

What’s more, when Sentinel-1 sends a pulse of radio waves onto a flat surface like the sea, there is little to reflect the waves back to the satellite. A low return signal means a darker colour is presented on any SAR image. But when the radio waves hit a ship they are reflected back to the satellite and generate a higher return signal, and therefore a much brighter colour.

This makes detecting ships fairly straightforward if they are known to position themselves at a particular set of coordinates – such as at the Avlita Terminal.

Satellite and SAR imagery shows the scene at the Avlita Terminal when no ship is present.

It must be noted that Sentinel-1 images have not been as frequent since late 2021 due to the failure of one of the two satellites in the constellation.

This means that more ships may be recorded in the years prior to 2021. It does not mean that marine traffic has dropped off in recent years.

Over the past year the SDT has captured imagery at Sevastopol on 120 separate days. Eighty-six of these matched days recorded by Planet imagery, while 31 were recorded on days that there was no available Planet imagery.

For example, on 25 June 2022, the SeaKrime project reported that a ship named the Matros Koshka was present at the Avlita Terminal. The SDT shows that there was indeed a ship present that day, something it would not have been possible to know otherwise given there was no satellite imagery captured at this time.

While obtaining visual confirmation of the name of the ship was not possible with the SDT alone, it is notable (although not conclusive) that public data about the size of the ship, which Marine Traffic states is 169 metres, is consistent with details captured by the tool when the minimum ship length option is observed.

The minimum ship length of the SDT was set to 160m on 25 July, 2022.

The Matros Koshka is also listed by Equasis as being owned by Crane Marine Contracting, and the company did not respond to requests for comment about whether the vessel was at the Avlita terminal on June 25.

AIS tracking data visible on MarineTraffic showed that the Matros Koshka transmitted its presence just north of the Bosphorus on June 12, heading towards Sevastopol. It then went dark before reappearing on July 7 as it re-approached the Bosphorus.

The SDT has the added benefit of being a completely automated tool, as well as being open source and free to use.

It must be noted that some vessels detailed by satellite imagery and the SDT may be the same ships returning to the terminal over time or, on other occasions, the same ship may have stayed in port for several days and appeared in consecutive images.

Yet despite these caveats, what’s clear from the imagery is that a variety of ships capable of carrying grain have been coming and going from the terminal since the start of the conflict, and in the years prior, despite AIS tracking data returning few results.

If all of these vessels were operating at full capacity, then it is possible that millions of tons of grain could have exited Crimea via the terminal and Sevastopol.

With data going back to 2015, when Russia first annexed Crimea, the SDT details activity at the port long before the start of the conflict.

It could also provide insight when focussed elsewhere.

Given that the SDT can capture data over a prolonged period from a wide area of interest, it could be possible to uncover new leads that help identify ship-to-ship transfers, as previously highlighted as an ongoing issue by Yaresko, Daukin and detailed in the aforementioned reporting of Bloomberg and the Wall Street Journal.

While there is a lot of data to analyse, the SDT can capture the shape and placement of vessels in any defined area at sea or in dock when the Sentinel-1 satellite passes overhead.

With reports that ship-to-ship transfers have been taking place in the Kerch Strait, drawing an area of interest with the SDT is the first logical step.

Given the sheer number of ships passing through this area, however, researchers must note that finding the exact moments of ship-to-ship transfers on the SDT will likely take a lot of patience.

With the SDT gathering more and more SAR imagery as time goes on, it is possible that new leads that can be cross-checked against satellite imagery or other open source information could help identify which ships have been loading grain in Crimea before exchanging it with other vessels at sea to mask its true origin.

However, Diakun of Lloyd’s List warned that investigators must be wary that ship-to-ship transfers could also be happening in this region with products other than grain or that have nothing to do with grain taken from Ukraine.

As with the previous media investigations, it is not possible to know for certain whether every ship captured at the Avlita Terminal and beyond by satellite or SAR imagery was indeed loading grain, or the provenance of any grain that may have been loaded.

Yet the fact that grain has been transported to and from Crimea since the onset of Russia’s full-scale invasion does not appear to be in doubt.

Russia’s own Tass news agency reported in June last year that grain from the Kherson region was being transported to the region.

Local news reports from Sevastopol have also documented the operation of the Avlita Terminal.

Emailed questions to Avlita did not receive a response prior to publication, while calls to the company’s offices in Moscow and Sevastopol went unanswered. The Russian government did not respond to emailed request for comment.

Bellingcat will now begin the task of attempting to match up as much information as possible from the SDT and satellite imagery from Planet to local reports and those of ship spotters posted on social media.

It invites the open source community to use the SDT tool and satellite images to begin to build up an even greater picture of events at Sevastopol, the Kerch Strait and elsewhere in the Black Sea.

 

Sophie Tedling and Teemu Nieminen from Bellingcat’s Global Authentication Project (GAP) contributed to this report alongside Bellingcat’s Eoghan Macguire and Youri van der Weide.