#11 WEHILANI // Vessel Intelligence System

Intelligence Overview

WEHILANI · MMSI 338165737 · 🇺🇸 US · Primary Port: Wilmington NC

PERIOD: JAN–DEC 2024

⚠ INTELLIGENCE ASSESSMENT: WEHILANI ranks #11 of 69,461 monitored vessels with 398 anomalous detections across 12 months. Composite risk score: 0.9500 (CRITICAL). Active alert types: POSITION_JUMP, ZIGZAG, SPEED_ANOMALY.

Global Rank

#11

of 69,461 vessels

Composite Score

0.9500

CRITICAL

Total Detections

398

Months Active

12/12

Unique Ports

15

Position Jumps

100

GPS spoofing

Speed Anomalies

113

Max Speed

102.2 kn

Max Jump

3,023km

Monthly Detection Volume

1
36

10
43

11
41

12
36

2
29

3
40

4
32

2024 MONTHLY DETECTIONS

Alert Type Distribution

SPEED_ANOMALY

113

POSITION_JUMP

100

ZIGZAG

44

Key Intelligence Findings

GPS Spoofing — 100 Position Jumps

AIS coordinates fabricated at impossible locations. Maximum jump of 3,023 km confirms the AIS transmitter is broadcasting false positions. Systematic identity concealment is in progress.

Velocity Fraud — 113 Speed Anomaly Events

AIS SOG field manipulated to broadcast physically impossible speeds up to 102.2 knots. Systematic falsification of movement data to corrupt automated tracking algorithms.

Evasion Navigation — 44 Zigzag Events

Erratic course-over-ground patterns up to 165.9° std deviation, far exceeding the 50° anomaly threshold. Pattern consistent with surveillance evasion maneuvers or anchor position AIS noise.

Port Detection Summary

🇺🇸

Wilmington NC

212

avg 0.767

🇺🇸

Charleston

14

avg 0.706

🇧🇸

Freeport

9

avg 0.849

🇵🇷

San Juan

7

avg 0.794

🇺🇸

Norfolk

3

avg 0.833

🇺🇸

Detroit

2

avg 0.950

🌐

Willemstad

2

avg 0.824

🇨🇺

Havana

1

avg 0.663

Monthly Alert Log — All Months

Month	Detections	Severity	Score	Nearest Port	Alert Types
January 2024	36	CRITICAL	0.9500	Wilmington NC	POSITION_JUMP; SPEED_ANOMALY; ZIGZAG
February 2024	29	CRITICAL	0.9500	Wilmington NC	POSITION_JUMP; SPEED_ANOMALY; ZIGZAG
March 2024	40	CRITICAL	0.9500	Wilmington NC	POSITION_JUMP; SPEED_ANOMALY; ZIGZAG
April 2024	32	CRITICAL	0.9500	Wilmington NC	POSITION_JUMP; SPEED_ANOMALY; ZIGZAG
May 2024	28	CRITICAL	0.9500	Wilmington NC	POSITION_JUMP; SPEED_ANOMALY; ZIGZAG
June 2024	27	CRITICAL	0.9500	Wilmington NC	SPEED_ANOMALY; ZIGZAG; POSITION_JUMP
July 2024	24	HIGH	0.8875	Wilmington NC	POSITION_JUMP; SPEED_ANOMALY; ZIGZAG
August 2024	34	CRITICAL	0.9500	Charleston	POSITION_JUMP; SPEED_ANOMALY; ZIGZAG
September 2024	28	CRITICAL	0.9500	Wilmington NC	POSITION_JUMP; SPEED_ANOMALY; ZIGZAG; DARK_VESSEL
October 2024	43	CRITICAL	0.9500	Norfolk	POSITION_JUMP; SPEED_ANOMALY; ZIGZAG
November 2024	41	CRITICAL	0.9500	Wilmington NC	POSITION_JUMP; SPEED_ANOMALY; ZIGZAG
December 2024	36	CRITICAL	0.9500	Wilmington NC	POSITION_JUMP; SPEED_ANOMALY; ZIGZAG

Activity Map

Detection events plotted · Color-coded by alert type · Drag to pan · Scroll to zoom

● Speed Anomaly ● Position Jump ● Zigzag ● Dark Vessel ● Rendezvous

Threat Intelligence

Analytical confidence: HIGH · Multi-indicator assessment

Threat Indicators Matrix

Indicator	Status	Evidence	Confidence
AIS Blackout / Dark Vessel	NOT DETECTED	—	LOW
GPS Spoofing / Position Jump	CONFIRMED	100 jumps · max 3023.2km	CRITICAL
Velocity Fraud / Speed Anomaly	CONFIRMED	113 events · max 102.2 kn	CRITICAL
Evasion Navigation / Zigzag	CONFIRMED	44 events · max COG std 165.9°	HIGH
Ship-to-Ship Rendezvous	NOT DETECTED	—	LOW
Multi-Port Operations	CONFIRMED	15 unique ports	HIGH
High-Risk Port Proximity: Havana	CONFIRMED	1 detections	HIGH
High-Risk Port Proximity: Port of Spain	CONFIRMED	0 detections	HIGH

Operational Profile

Primary AO

Wilmington NC and surrounding maritime zone

Active Period

12 months of continuous alert activity in 2024

Alert Density

398 detections across 257 individual events (avg 33.2/month)

Active Techniques

⊕ POS JUMP ⟳ ZIGZAG ⚡ SPEED

Threat Category

High-Confidence AIS Manipulation — Multiple confirmed evasion techniques

TTP Analysis

Tactics, Techniques & Procedures — Maritime ATT&CK Framework

MAR-T001

RTE-ANO-001

Velocity Fraud

AIS SOG field manipulation to broadcast impossible speeds up to 102.2 kn. Corrupts automated tracking algorithms and creates false movement vectors. Count: 113 events.

HIGH CONFIDENCE
113 events

MAR-T002

AIS-MAN-003

GPS Spoofing

GPS coordinate spoofing — AIS positions fabricated at impossible locations. Max jump: 3023.2km. Implies deliberate identity concealment. Count: 100 events.

HIGH CONFIDENCE
100 events

MAR-T003

RTE-ANO-005

Evasion Navigation

Erratic COG changes exceeding 50° threshold (max 165.9°). Consistent with surveillance evasion or at-anchor AIS manipulation. Count: 44 events.

HIGH CONFIDENCE
44 events

Risk Analysis

Composite risk scoring · Weighted indicator model · Quantus v2.4

Composite Score

0.9500

CRITICAL

Avg Detection Score

0.9448

Global Rank

#11

of 69,461 vessels

Weighted Indicator Scoring

Formula: (Dark×3) + (Rendezvous×4) + (PosJump×2) + (Speed×1) + (Zigzag×0.5) + (MaxScore×50)

Indicator	Count	Weight	Contribution
DARK_VESSEL	0	×3	0.0
RENDEZVOUS	0	×4	0.0
POSITION_JUMP	100	×2	200.0
SPEED_ANOMALY	113	×1	113.0
ZIGZAG	44	×0.5	22.0
MaxSingleScore	0.9500	×50	47.5
COMPOSITE TOTAL	Normalized [0,1]		0.9500 CRITICAL

⚡ Speed Anomaly Detections

Indicator: RTE-ANO-001 · 113 events · Max: 102.2 kn

AIS SOG FRAUD

Speed anomaly events are triggered when AIS Speed Over Ground (SOG) exceeds the 30-knot detection threshold. WEHILANI reports speeds up to 102.2 kn — consistent with deliberate AIS SOG field manipulation to corrupt tracking algorithms.

Total Events

113

Max Reported SOG

102.2 kn

Indicator ID

RTE-ANO-001

Speed Anomaly Events (Top 50 by score)

Date	Max SOG (kn)	Score	Severity	Port	Coordinates

⊕ Position Jump Detections

Indicator: AIS-MAN-003 · 100 events · Max jump: 3,023 km

GPS SPOOFING

Position jumps confirm GPS coordinate spoofing — AIS positions fabricated at impossible locations. WEHILANI has 100 confirmed position jumps with maximum displacement of 3,023 km.

Total Events

100

Max Jump Distance

3,023 km

Indicator ID

AIS-MAN-003

Position Jump Events (Top 50 by distance)

Date	Jump (km)	Implied Speed (kn)	Score	Severity	Spoofed-To Port	Coordinates

⟳ Zigzag / Erratic Navigation

Indicator: RTE-ANO-005 · 44 events · Max COG std: 165.9°

EVASION PATTERN

Zigzag events are triggered when course-over-ground (COG) standard deviation exceeds 50°. WEHILANI records COG deviations up to 165.9° — consistent with surveillance evasion maneuvers or at-anchor AIS noise manipulation.

Total Events

44

Max COG Std Dev

165.9°

Threshold

50°

Zigzag Events (Top 50 by COG deviation)

Date	COG Std Dev (°)	Score	Severity	Port	Coordinates

Port History

15 distinct port areas · US primary flag state

Complete Port Detection Summary

Port	Country	Detections	Avg Score	Avg Dist NM	Risk
Wilmington NC	🇺🇸	212	0.7669	48.5	STANDARD
Charleston	🇺🇸	14	0.7058	79.4	STANDARD
Freeport	🇧🇸	9	0.8485	384.5	STANDARD
San Juan	🇵🇷	7	0.7943	305.8	STANDARD
Norfolk	🇺🇸	3	0.8329	219.6	STANDARD
Detroit	🇺🇸	2	0.9500	159.3	STANDARD
Willemstad	🌐	2	0.8244	192.9	STANDARD
Havana	🇨🇺	1	0.6629	135.2	HIGH

🇺🇸 Wilmington NC — Port Profile

212 detections · Avg score 0.7669 · Avg distance 48.5 NM

LOW RISK

Total Detections

212

Primary port of operation

Avg Alert Score

0.7669

Avg Distance NM

48.5

Port proximity zone

Detection Types at Wilmington NC

SPEED_ANOMALY

89

POSITION_JUMP

80

ZIGZAG

43

Coordinates: 34.235°N, 77.948°W

Port Intelligence Notes

Port Country

🇺🇸 US

Risk Classification

LOW — Standard port monitoring applies

Detection Share

212 of 257 total detections (82.5%)

Avg Distance from Port

48.5 NM — consistent with port proximity operations

🇺🇸 Charleston — Port Profile

14 detections · Avg score 0.7058 · Avg distance 79.4 NM

LOW RISK

Total Detections

14

Secondary port

Avg Alert Score

0.7058

Avg Distance NM

79.4

Port proximity zone

Detection Types at Charleston

POSITION_JUMP

7

SPEED_ANOMALY

7

Coordinates: 32.776°N, 79.931°W

Port Intelligence Notes

Port Country

🇺🇸 US

Risk Classification

LOW — Standard port monitoring applies

Detection Share

14 of 257 total detections (5.4%)

Avg Distance from Port

79.4 NM — consistent with port proximity operations

🇧🇸 Freeport — Port Profile

9 detections · Avg score 0.8485 · Avg distance 384.5 NM

LOW RISK

Total Detections

9

Secondary port

Avg Alert Score

0.8485

Avg Distance NM

384.5

Possible spoofed coords

Detection Types at Freeport

SPEED_ANOMALY

5

POSITION_JUMP

3

ZIGZAG

1

Coordinates: 26.526°N, 78.700°W

Port Intelligence Notes

Port Country

🇧🇸 BS

Risk Classification

LOW — Standard port monitoring applies

Detection Share

9 of 257 total detections (3.5%)

Avg Distance from Port

384.5 NM — anomalously high, suggests spoofed coordinates

🇵🇷 San Juan — Port Profile

7 detections · Avg score 0.7943 · Avg distance 305.8 NM

LOW RISK

Total Detections

7

Secondary port

Avg Alert Score

0.7943

Avg Distance NM

305.8

Possible spoofed coords

Detection Types at San Juan

SPEED_ANOMALY

4

POSITION_JUMP

3

Coordinates: 18.465°N, 66.115°W

Port Intelligence Notes

Port Country

🇵🇷 PR

Risk Classification

LOW — Standard port monitoring applies

Detection Share

7 of 257 total detections (2.7%)

Avg Distance from Port

305.8 NM — anomalously high, suggests spoofed coordinates

🇺🇸 Norfolk — Port Profile

3 detections · Avg score 0.8329 · Avg distance 219.6 NM

LOW RISK

Total Detections

3

Secondary port

Avg Alert Score

0.8329

Avg Distance NM

219.6

Possible spoofed coords

Detection Types at Norfolk

SPEED_ANOMALY

2

POSITION_JUMP

1

Coordinates: 36.847°N, 76.293°W

Port Intelligence Notes

Port Country

🇺🇸 US

Risk Classification

LOW — Standard port monitoring applies

Detection Share

3 of 257 total detections (1.2%)

Avg Distance from Port

219.6 NM — anomalously high, suggests spoofed coordinates

🇺🇸 Detroit — Port Profile

2 detections · Avg score 0.9500 · Avg distance 159.3 NM

LOW RISK

Total Detections

2

Secondary port

Avg Alert Score

0.9500

Avg Distance NM

159.3

Port proximity zone

Detection Types at Detroit

POSITION_JUMP

1

SPEED_ANOMALY

1

Port Intelligence Notes

Port Country

🇺🇸 US

Risk Classification

LOW — Standard port monitoring applies

Detection Share

2 of 257 total detections (0.8%)

Avg Distance from Port

159.3 NM — consistent with port proximity operations

🌐 Willemstad — Port Profile

2 detections · Avg score 0.8244 · Avg distance 192.9 NM

LOW RISK

Total Detections

2

Secondary port

Avg Alert Score

0.8244

Avg Distance NM

192.9

Port proximity zone

Detection Types at Willemstad

POSITION_JUMP

1

SPEED_ANOMALY

1

Port Intelligence Notes

Port Country

🌐 CW

Risk Classification

LOW — Standard port monitoring applies

Detection Share

2 of 257 total detections (0.8%)

Avg Distance from Port

192.9 NM — consistent with port proximity operations

🇨🇺 Havana — Port Profile

1 detections · Avg score 0.6629 · Avg distance 135.2 NM

HIGH RISK

⚠ HIGH RISK PORT: Havana is a known high-risk transshipment zone associated with illicit maritime activity. Detections here require elevated scrutiny.

Total Detections

1

Secondary port

Avg Alert Score

0.6629

Avg Distance NM

135.2

Port proximity zone

Detection Types at Havana

SPEED_ANOMALY

1

Coordinates: 23.137°N, 82.377°W

Port Intelligence Notes

Port Country

🇨🇺 CU

Risk Classification

HIGH — HIGH

Detection Share

1 of 257 total detections (0.4%)

Avg Distance from Port

135.2 NM — consistent with port proximity operations

Ownership Intelligence

MMSI registry · Flag state analysis · Beneficial ownership investigation

Vessel Name

WEHILANI

MMSI

338165737

Flag State (MMSI-derived)

🇺🇸 US

MID Code

338 → 🇺🇸 US

Primary Port

Wilmington NC

Detection Period

12 months (2024)

Registered Owner

Pending registry lookup

Beneficial Owner

Requires FinCEN CDD query

OFAC SDN Status

Pending cross-reference

Recommended Action

Physical inspection + full registry query

Vessel Type Analysis

AIS declared type · Physical capability vs. observed behavior

Type Mismatch Assessment

AIS Declared Type

vessel_type=37 (Pleasure Craft)

Behavior Consistency

INCONSISTENT — year-round multi-port operations with 398 anomalous events are not consistent with pleasure craft use

Speed Capability

Reported 102.2 kn — physically impossible for Type 37 (max ~45 kn high-performance)

Inspection Priority

HIGH — Recommend USCG/CBSA physical boarding and documentation review

Applicable Statutes

47 C.F.R. § 80.953 (AIS falsification) · 33 C.F.R. § 164.46 (AIS carriage) · 21 U.S.C. § 955 (maritime drug law)