On the night of 31 May 2017, a passenger on a Malaysia Airlines flight that had just left Melbourne claimed he had a bomb and tried to reach the cockpit, forcing the aircraft to turn back to Tullamarine. Other passengers tackled and restrained him, the plane landed safely, and he was arrested on the tarmac. The “device” was a portable speaker with a battery pack. The man, Manodh Marks, later pleaded guilty and was sentenced to 12 years’ imprisonment — becoming the first person in Australia sentenced for attempting to take control of an aircraft.
Our newsroom has reviewed the full public record on the MH128 incident: the Victoria Police statements at the time, contemporaneous mainstream reporting, and the outcome of the prosecution. Where legal or medical questions remain qualified, we have generalised rather than guessed.
Overview: what happened on MH128 #
Flight MH128, bound for Kuala Lumpur with around 220 passengers, had been airborne only a few minutes when Marks moved through the cabin and ran toward the cockpit door holding the object he claimed was an explosive. Cabin crew and passengers acted, tackling him to the floor and restraining him for the remainder of the flight. The aircraft returned to Melbourne Airport about fifteen minutes after take-off. On landing, it was met by police and emergency services, and Marks was taken into custody. Police later confirmed the object was not an explosive device.
Why the response looked the way it did #
From the outside, a full emergency response to a device that turned out to be harmless can look like an overreaction. From a security standpoint it is the opposite. Aviation security operates on the principle that a credible threat must be treated as real until it is proven otherwise. A claim of a bomb on an aircraft in flight cannot be assessed in the air with certainty, so the safe course is to get the aircraft on the ground, contain the person, and clear the threat methodically.
That is why the aircraft turned back, why it was met by a full response, and why the all-clear came only after the object was examined. The cost of treating a real threat as a hoax is catastrophic; the cost of treating a hoax as real is a delayed flight and a thorough search. Security systems are deliberately tuned to accept the second cost to avoid the first.
The role of the passengers #
One feature of the Tullamarine incident is worth dwelling on: the threat was neutralised in the cabin by crew and passengers before the aircraft had even landed. That mirrors a pattern seen across crowded-place incidents, where the people physically closest to a threat limit the harm in the seconds before authorities can intervene. It is not a substitute for professional security, but it is a recurring and consequential part of how these events actually unfold.
Court outcomes #
The matter was prosecuted under Commonwealth aviation-crimes law. Marks pleaded guilty and, in June 2018, was sentenced to 12 years’ imprisonment. The case was noted at the time as the first in Australia in which a person was sentenced for attempting to take control of an aircraft.
Marks had a documented history of serious mental illness, which featured in the proceedings. But — as in other Melbourne cases of this period — a history of mental ill-health did not, on these facts, displace criminal responsibility: he pleaded guilty and was sentenced to a substantial term. How the courts weigh mental impairment when fixing a penalty is set out in our explainers on how a criminal trial works and how a sentence is decided.
Why it still matters #
The Tullamarine incident is a useful case study in how layered security is meant to work: deterrence and screening on the ground, trained crew in the air, a coordinated emergency response on landing, and a careful legal process afterwards. None of those layers is perfect on its own. Together, they turned a frightening claim on a departing flight into a contained incident with no one physically harmed — and a prosecution that set a legal first. In security terms, that is exactly the intended outcome.
If you have information about a security concern, the National Security Hotline is 1800 123 400. In an emergency, always call Triple Zero (000).
