> ## Content Index
> Fetch the complete content index at: https://connortumbleson.com/llms.txt
> Use this file to discover other available public pages before exploring further.

# Internet Sleuths & The Yi Peng 3
- URL: https://connortumbleson.com/2024/11/25/internet-sleuths-the-yi-peng-3/
- Published: 2024-11-25T03:30:18.000Z
- Updated: 2025-02-04T11:42:05.000Z
- Author: Connor Tumbleson

![](https://connortumbleson.com/content/images/2024/11/yi-peng3-1.png)

[Photo of Yi Peng 3 via Ray Hensel](https://www.marinetraffic.com/en/photos/of/ships/shipid:213234/shipname:YI%20PENG%203?order=date%5Fuploaded&ref=connortumbleson.com)

A few days ago I signed up for [Blue Sky](https://bsky.app/profile/connortumbleson.com?ref=connortumbleson.com) and one of the first things I randomly spotted in my zero follower "discovery" tab was this [thread](https://bsky.app/profile/auonsson.bsky.social/post/3lbc5va7f722p?ref=connortumbleson.com). It was discussing how the above Yi Peng 3 ship crossed both the C-Lion1 and BCS undersea Internet cables when they were mysteriously cut.

![](https://connortumbleson.com/content/images/2024/11/c-lion1-bsc.png)

[Submarine Cable Map](https://www.submarinecablemap.com/multiselect/submarine-cable?ids=bcs-east-west-interlink,c-lion1&ref=connortumbleson.com) \- C-Lion1 & BCS East-West Interlink

Those two cables have been selected above to show their connection points which break down to:

**BCS**

- Sventoji, Lithuania
- Katthammarsvik, Sweden

**C-Lion1**

- Rostock, Germany
- Helsinki, Finland
- Hanko, Finland

Thankfully for all these countries - the loss of both of those cables did not severely disrupt their internet traffic as proven via [Cloudflare Radar](https://blog.cloudflare.com/resilient-internet-connectivity-baltic-cable-cuts/?ref=connortumbleson.com). It was simply re-routed automatically through less optimized routes. However, some of those less optimized routes include Russia controlled cables which fuels my paranoia.

When I saw this post by [auonsson](https://bsky.app/profile/auonsson.bsky.social?ref=connortumbleson.com) I was hooked immediately.

![](https://connortumbleson.com/content/images/2024/11/3lbc5va7f722p.jpg)

[bsky post via auonsson](https://bsky.app/profile/auonsson.bsky.social/post/3lbc5va7f722p?ref=connortumbleson.com)

This took public AIS (Automatic Indication System) data of ship travel times and compared it with the loss of connectivity on the two undersea cables. Sure enough it was proved the Yi Peng 3 ship crossed both of those cables at the exact times they were disrupted.

Now that might not prove the cables were broken by that action, but it sure is convincing given the timing.

So I kept reading on - this time the author looped in others ([pekka](https://bsky.app/profile/did:plc:yzywgiiou7cx63uddiru6m2o?ref=connortumbleson.com) & [garygnutter](https://bsky.app/profile/did:plc:26rid3megkunzvet6xtv6arw?ref=connortumbleson.com)) who provided further context on this situation. This time with images showing the track Yi Peng 3 took as it left Russia.

![](https://connortumbleson.com/content/images/2024/11/3lbc5va7f722p_1.jpg)

![](https://connortumbleson.com/content/images/2024/11/3lbc5va7f722p_2.jpg)

[bsky post via auonsson](https://bsky.app/profile/auonsson.bsky.social/post/3lbc5va7f722p?ref=connortumbleson.com)

So of course given the present situation with Russia - seeing a massive bulk carrier Chinese ship departing from Russia and allegedly breaking 2 undersea cables seems like sabotage.

I had to look up the last time this happened and it was October of 2023 when yet again another Chinese vessel ([Newnew Polar Bear](https://en.wikipedia.org/wiki/Newnew%5FPolar%5FBear?ref=connortumbleson.com)) broke gas pipelines and undersea cables. Now of course the owner of a ship and who is pilot/crew of a ship don't have to be the same country.

So I read on this time seeing an image from [garygnutter](https://bsky.app/profile/garygnutter.bsky.social?ref=connortumbleson.com) who plotted Yi Peng 3's movement which clearly changes right before crossing the BCS cable.

![](https://connortumbleson.com/content/images/2024/11/3lbc5va7f722p_3.jpg)

[bsky post via garygnutter](https://bsky.app/profile/garygnutter.bsky.social/post/3lbc4tcraz22m?ref=connortumbleson.com)

At this point I'm convinced the Yi Peng 3 intentionally did this and absolutely mind blown that these random people I stumbled upon were a treasure trove of information.

Sure enough they are quick on providing updates showing the military getting involved.

0:00 

/0:06 

1× 

[bsky post via auonsson](https://bsky.app/profile/auonsson.bsky.social/post/3lbcl4dq2wc2o?ref=connortumbleson.com)

It feels like I'm part of a live investigation and I'm thousands of miles away watching some feeds. I'm hoping we all learned from the last sabotage via NewNew Polar Bear and not letting this ship go without boarding it and performing an investigation.

Sure enough I scroll again and get excited - the boat has been chased down and slows to a crawl.

0:00 

/0:20 

1× 

[bsky post via auonsson](https://bsky.app/profile/auonsson.bsky.social/post/3lbd3ks7fts2o?ref=connortumbleson.com)

It seems a large military presence is growing on the Yi Peng 3 with many countries in support. The ship is passing between international waters and specific country water so either very much intentional or something greater in play.

While The Yi Peng 3 sits in the water guarded by a few war ships, others are researching the owner of this ship.

> Helsingin Sanomat visited Yi Peng 3 ship's management company Win Enterprise Ship Management and interviewed them briefly. They also visited the address of the OWNER, Ningbo Yipeng Shipping Co., LTD. Address was empty. It's currently marked as a “Military Management Zone”.  
> [https://bsky.app/profile/ainorautahuopa.bsky.social/post/3lblxmascss2k](https://bsky.app/profile/ainorautahuopa.bsky.social/post/3lblxmascss2k?ref=connortumbleson.com)

This was a bit expected - the management company knew nothing and the owner of the ship's registration pointed to some business that had been closed for 8 years. Instead the military is using the area as a "management zone" and request the investigative journalists to leave.

![](https://connortumbleson.com/content/images/2024/11/bafkreihlkfoufcfyofy4gwjnr7v6yomhkahhrz2hvyrvrmxlsnw6zszmaa.jpg)

[bsky post via auonsson](https://bsky.app/profile/auonsson.bsky.social/post/3lbkskux7us2c?ref=connortumbleson.com)

So now we have a ship ([Yi Peng 3](https://www.marinetraffic.com/en/ais/details/ships/shipid:213234/mmsi:414270000/imo:9224984/vessel:YI%5FPENG%5F3?ref=connortumbleson.com)) that is being watched by war ships ([Bad Dueben](https://www.marinetraffic.com/en/ais/details/ships/shipid:5984242/mmsi:211815690/imo:9830032/vessel:BAD%5FDUBEN?ref=connortumbleson.com) & [P523](https://www.marinetraffic.com/en/ais/details/ships/shipid:159219/mmsi:220434000/imo:0/vessel:DNK%5FNAVY%5FPATROL%5FP523?ref=connortumbleson.com)) owned by a company/entity that is difficult to pinpoint. Every day a new ship is discovered getting involved and tensions rise. All I know is huge undersea cables that carry immense amounts of Internet traffic seems like an attractive target for an increasingly cyber warfare.

Head on to [auonsson's Blue Sky](https://bsky.app/profile/auonsson.bsky.social?ref=connortumbleson.com) account if you want to follow this story further.