On the night of Aug. 4, an employee at Leipzig/Halle Airport in eastern Germany found a drone carrying an explosive device inside the secured cargo area, beside the southern runway. It was sitting next to an Antonov Airlines cargo aircraft — the Ukrainian carrier that flies military supplies. Federal police brought in a bomb-disposal robot and removed the detonator. Flight operations stopped completely, and investigators believe a second drone then struck a DHL cargo plane that was going around because the runway had been closed.
Ten days later, according to the public broadcasters NDR and WDR and the Süddeutsche Zeitung, a third drone was found west of the airport, carrying roughly 50 grams of a substance investigators suspected to be hexogen — a military explosive. The prosecutor general’s office declined to comment on that report. Saxony’s counterterrorism police and the state prosecutor’s extremism unit have the case, and classify the airport as critical infrastructure.
Leipzig/Halle is not a regional airport. It is the hub of NATO’s Strategic Airlift International Solution — the arrangement through which American and allied weapons, ammunition, and equipment reach the alliance’s eastern members and Ukraine, much of it flown by Ukrainian cargo operators. Whoever placed that device chose the hub, not a spur.
I SPENT 12 YEARS IN COUNTERINTELLIGENCE. TRUMP’S DEFENDERS ARE SABOTAGING THEIR OWN CASE
On Sept. 1, the German government said who did it. Interior Minister Alexander Dobrindt and Foreign Minister Johann Wadephul announced in Berlin that the police investigation, the pattern of the attack, and intelligence findings together established Russian responsibility. The government’s own account notes that three separate lines of evidence were examined and that any one of them alone would have sufficed. The device showed high technical expertise. The execution was handed to low-level agents. The attribution is political; the criminal case continues.
Then came the answer, and this is the part Washington should read carefully.
The Russian consulate general in Bonn closes on Sept. 18. The contract for the Russian House cultural centre in Berlin is terminated. Germany will propose new EU listings of Russian individuals. Entry controls for Russian nationals are tightened. Pressure on the shadow fleet is to increase. The ambassador was summoned. EU foreign ministers offered solidarity the next day, and NATO ambassadors met.
Count what is actually in hand. Two concrete measures: one consulate that has not closed yet, and one lease. Three announcements: a proposal to be tabled in Brussels, a visa policy, and an unspecified increase in pressure.
And then the German government described its own response, in writing, on its own website. Resolute, measured and proportionate, it says, and then adds three more words in the original: Ohne zu eskalieren. Without escalating.
Berlin had set itself a different standard not long ago. In January, the same Alexander Dobrindt told the Süddeutsche Zeitung that Germany would strike back, including abroad, that it would disrupt attackers and destroy their infrastructure, and that the threshold for answering cyberattacks would be set deliberately low. He has since brought forward an active cyber defense bill built on that promise.
The bill is not yet law, and its powers concern cyberattacks rather than explosives on runways, so it would be unfair to score the two directly against each other. But it is the same minister, and the standard he announced in January is not the standard that was met in September.
For 12 years, my job in Georgian counterintelligence was to read documents of exactly this kind and work out what the other side would take from them. Here is what that gap is worth to whoever planned Leipzig.
A probe is not primarily an attack. It is a price check. You place a device where it will certainly be found, at a target whose significance cannot be denied, and then you sit back and record what the answer costs you. The material damage is incidental. The intelligence product is the response.
The response cost Russia a consulate in Bonn and the lease on a cultural centre. Both are recoverable. Neither touches the capability that put the drone on the tarmac. The proposals that might have touched it — the EU listings, the shadow-fleet pressure — remain proposals, and a proposal is not a price. I do not have the assessment Moscow wrote afterward. I know what I would have written in their place: This one came in under budget, and the next can be larger.
Five days later, Foreign Minister Sergei Lavrov gave the tell. On Sept. 6, on Russian state television, he said some drone had been found at Leipzig, that it had been called Russian without anyone bothering to investigate, and that this was, broadly speaking, the beginning of a real war. He listed the Bonn consulate and the Russian House, and observed that the Germans had also closed their diplomatic missions before the Second World War.
Consider what that is. A foreign minister invoked the largest war in European history in response to the closure of a cultural centre — in the same week that his president hosted Steve Witkoff and Jared Kushner in the Kremlin and handed them a three-day pause in strikes on Kyiv. Putin had ordered that pause himself, tied it to their visit, and could end it himself. Rhetorical escalation is the cheapest instrument in the inventory. It commits nothing and can be withdrawn without breaking anything. States reach for it when they have decided not to spend anything else.
Then, on Sept. 8, Putin telephoned the American president and, by the Kremlin’s account of the call, told him that Russia has no aggressive plans against Europe.
That is what a successful probe returns. You test the alliance’s logistics hub in August. You pay a consulate and a lease in September. And within the week, you are on the phone to Washington, offering reassurance about the continent whose airlift hub your government stands accused of attacking.
Americans have a direct stake in this, and not a sentimental one. Leipzig/Halle is a load-bearing node in how the United States moves materiel into Europe. Whatever else that August produced, it produced a number: what sabotage at that node costs. A number is worth more to an adversary than a damaged aircraft.
Nor is Washington’s own record for that week beyond question. On Sept. 4, the Trump Treasury Department cut a Turkish investment bank out of the dollar system for moving Iranian oil proceeds. On Sept. 8, it designated thirty-six targets across Iranian aviation, including every remaining Iranian passenger airline. That instrument is real, and it is accelerating, which is more than can be said for anyone else’s. But the proceeds in the Turkish case came out of China, and China — Iran’s largest trading partner and the principal buyer of its crude — has faced no comparable action. We have designated every regional carrier in Iran. We have not touched the country that buys the oil funding it.
In April 2008, when NATO declared at Bucharest that Georgia would become a member, I was chief of military police in Shida Kartli — the Georgian region that four months later became one of the war’s opening fronts. There was no timetable and no mechanism. In August, the tanks came through the Roki tunnel. The declaration was sincere. It was also, in the only sense that mattered that August, a piece of paper.
I do not raise this because Germany is Georgia. I raise it because the calculation on the other side is the same one, run by the same kind of people, and it does not weigh sincerity.
THE FIVE TICKING TIME BOMBS FORCING PUTIN TO THE NEGOTIATING TABLE
None of this is an argument for escalation. Restraint is often the correct decision, and a government that keeps its response proportionate is doing something defensible rather than something cowardly. But there is a difference between choosing restraint and advertising it. Berlin did not merely decline to escalate. It published the fact, as a feature of the policy, in its own written account of the response.
An instrument that is never spent stops being read as an instrument. That is not a moral judgment. It is the arithmetic the other side runs, and it is the calculation that precedes every war I have watched begin.
Emzari Gelashvili is a San Francisco–based geopolitical analyst and columnist who monitors Russian-language media. From 1996 to 2008 he served as a senior official across Georgia’s Ministry of State Security, Ministry of Defense, and Ministry of Internal Affairs, with a counterintelligence career focused on Russian and Iranian intelligence operations, and he was a member of the Georgian Parliament from 2008 to 2012. His work appears in Newsweek, The Hill, the Washington Examiner, RealClearDefense, and RealClearWorld, and at emzargelashvili.substack.com.