Almost always, the answer is no — it’s an airliner, a trainer, or a medevac doing exactly what it should. But a few aircraft genuinely deserve a second look, and there are concrete, checkable signals that separate them from the noise. Here’s how to read your sky calmly and correctly.
An aircraft circling, flying low, or lacking a familiar airline name is usually benign: a flight-training circuit, a helicopter on a survey, an air ambulance, a police or news helicopter, or simple holding under ATC. AeroScope exists to help you confirm that quickly — and to flag the genuine exceptions — using transparent signals rather than guesswork.
An ICAO address in a known military block, corroborated by callsign — a heavily weighted factor. See military tracking.
7500 (hijack), 7600 (radio failure) or 7700 (general emergency) is the clearest real signal there is. See squawk codes.
Sustained circling or a racetrack over one spot can indicate survey, surveillance or holding — classified automatically by pattern-of-life.
A track that fails its integrity checks may be spoofed rather than threatening. See detect spoofing.
AeroScope rolls these into a 0–100 attention score so the few aircraft worth a look rise to the top. See threat scoring.