#322 MORNING MIST // Vessel Intelligence System

Intelligence Overview

MORNING MIST · MMSI 338179507 · 🇺🇸 US · Primary Port: San Francisco

PERIOD: JAN–DEC 2024

⚠ INTELLIGENCE ASSESSMENT: MORNING MIST ranks #322 of 69,461 monitored vessels with 65 anomalous detections across 5 months. Composite risk score: 0.9500 (CRITICAL). Active alert types: SPEED_ANOMALY, ZIGZAG, POSITION_JUMP.

Global Rank

#322

of 69,461 vessels

Composite Score

0.9500

CRITICAL

Total Detections

65

Months Active

5/12

Unique Ports

8

Position Jumps

26

GPS spoofing

Speed Anomalies

26

Max Speed

102.2 kn

Max Jump

3,736km

Monthly Detection Volume

11
46

12
15

2024 MONTHLY DETECTIONS

Alert Type Distribution

SPEED_ANOMALY

26

POSITION_JUMP

26

ZIGZAG

9

Key Intelligence Findings

GPS Spoofing — 26 Position Jumps

AIS coordinates fabricated at impossible locations. Maximum jump of 3,736 km confirms the AIS transmitter is broadcasting false positions. Systematic identity concealment is in progress.

Velocity Fraud — 26 Speed Anomaly Events

AIS SOG field manipulated to broadcast physically impossible speeds up to 102.2 knots. Systematic falsification of movement data to corrupt automated tracking algorithms.

Evasion Navigation — 9 Zigzag Events

Erratic course-over-ground patterns up to 103.9° std deviation, far exceeding the 50° anomaly threshold. Pattern consistent with surveillance evasion maneuvers.

Port Detection Summary

🇺🇸

San Francisco

27

avg 0.741

🇺🇸

Oakland

23

avg 0.761

🇺🇸

Los Angeles

5

avg 0.706

🇲🇽

Manzanillo

2

avg 0.721

🇺🇸

Long Beach

1

avg 0.867

🇲🇽

Veracruz

1

avg 0.796

🇨🇦

Victoria

1

avg 0.950

🇺🇸

Portland OR

1

avg 0.607

Monthly Alert Log — All Months

Month	Detections	Severity	Score	Nearest Port	Alert Types
June 2024	1	CRITICAL	0.9000	San Francisco	ZIGZAG
August 2024	2	HIGH	0.7862	San Francisco	ZIGZAG
September 2024	1	MEDIUM	0.5239	San Francisco	ZIGZAG
November 2024	46	CRITICAL	0.9500	San Francisco	SPEED_ANOMALY; ZIGZAG; POSITION_JUMP
December 2024	15	HIGH	0.8581	San Francisco	POSITION_JUMP; SPEED_ANOMALY; ZIGZAG

Activity Map

Detection events plotted · Color-coded by alert type · Drag to pan · Scroll to zoom

● Speed Anomaly ● Position Jump ● Zigzag ● Dark Vessel ● Rendezvous

Threat Intelligence

Analytical confidence: HIGH · Multi-indicator assessment

Threat Indicators Matrix

Indicator	Status	Evidence	Confidence
AIS Blackout / Dark Vessel	NOT DETECTED	—	LOW
GPS Spoofing / Position Jump	CONFIRMED	26 jumps · max 3735.8km	CRITICAL
Velocity Fraud / Speed Anomaly	CONFIRMED	26 events · max 102.2 kn	CRITICAL
Evasion Navigation / Zigzag	CONFIRMED	9 events · max COG std 103.9°	HIGH
Ship-to-Ship Rendezvous	NOT DETECTED	—	LOW
Multi-Port Operations	CONFIRMED	8 unique ports	HIGH
High-Risk Port Proximity: Manzanillo	CONFIRMED	2 detections	HIGH
High-Risk Port Proximity: Veracruz	CONFIRMED	1 detections	HIGH

Operational Profile

Primary AO

San Francisco and surrounding maritime zone

Active Period

5 months of continuous alert activity in 2024

Alert Density

65 detections across 61 individual events (avg 13.0/month)

Active Techniques

⚡ SPEED ⟳ ZIGZAG ⊕ POS JUMP

Threat Category

High-Confidence AIS Manipulation — Multiple confirmed evasion techniques

TTP Analysis

Tactics, Techniques & Procedures — Maritime ATT&CK Framework

MAR-T001

RTE-ANO-001

Velocity Fraud

AIS SOG field manipulation to broadcast impossible speeds up to 102.2 kn. Corrupts automated tracking algorithms and creates false movement vectors. Count: 26 events.

HIGH CONFIDENCE
26 events

MAR-T002

AIS-MAN-003

GPS Spoofing

GPS coordinate spoofing — AIS positions fabricated at impossible locations. Max jump: 3735.8km. Implies deliberate identity concealment. Count: 26 events.

HIGH CONFIDENCE
26 events

MAR-T003

RTE-ANO-005

Evasion Navigation

Erratic COG changes exceeding 50° threshold (max 103.9°). Consistent with surveillance evasion or at-anchor AIS manipulation. Count: 9 events.

HIGH CONFIDENCE
9 events

Risk Analysis

Composite risk scoring · Weighted indicator model · Quantus v2.4

Composite Score

0.9500

CRITICAL

Avg Detection Score

0.8036

Global Rank

#322

of 69,461 vessels

Weighted Indicator Scoring

Formula: (Dark×3) + (Rendezvous×4) + (PosJump×2) + (Speed×1) + (Zigzag×0.5) + (MaxScore×50)

Indicator	Count	Weight	Contribution
DARK_VESSEL	0	×3	0.0
RENDEZVOUS	0	×4	0.0
POSITION_JUMP	26	×2	52.0
SPEED_ANOMALY	26	×1	26.0
ZIGZAG	9	×0.5	4.5
MaxSingleScore	0.9500	×50	47.5
COMPOSITE TOTAL	Normalized [0,1]		0.9500 CRITICAL

⚡ Speed Anomaly Detections

Indicator: RTE-ANO-001 · 26 events · Max: 102.2 kn

AIS SOG FRAUD

Speed anomaly events are triggered when AIS Speed Over Ground (SOG) exceeds the 30-knot detection threshold. MORNING MIST reports speeds up to 102.2 kn — consistent with deliberate AIS SOG field manipulation to corrupt tracking algorithms.

Total Events

26

Max Reported SOG

102.2 kn

Indicator ID

RTE-ANO-001

Speed Anomaly Events (Top 50 by score)

Date	Max SOG (kn)	Score	Severity	Port	Coordinates

⊕ Position Jump Detections

Indicator: AIS-MAN-003 · 26 events · Max jump: 3,736 km

GPS SPOOFING

Position jumps confirm GPS coordinate spoofing — AIS positions fabricated at impossible locations. MORNING MIST has 26 confirmed position jumps with maximum displacement of 3,736 km.

Total Events

26

Max Jump Distance

3,736 km

Indicator ID

AIS-MAN-003

Position Jump Events (Top 50 by distance)

Date	Jump (km)	Implied Speed (kn)	Score	Severity	Spoofed-To Port	Coordinates

⟳ Zigzag / Erratic Navigation

Indicator: RTE-ANO-005 · 9 events · Max COG std: 103.9°

EVASION PATTERN

Zigzag events are triggered when course-over-ground (COG) standard deviation exceeds 50°. MORNING MIST records COG deviations up to 103.9° — consistent with surveillance evasion maneuvers or at-anchor AIS noise manipulation.

Total Events

9

Max COG Std Dev

103.9°

Threshold

50°

Zigzag Events (Top 50 by COG deviation)

Date	COG Std Dev (°)	Score	Severity	Port	Coordinates

Port History

8 distinct port areas · US primary flag state

Complete Port Detection Summary

Port	Country	Detections	Avg Score	Avg Dist NM	Risk
San Francisco	🇺🇸	27	0.7414	80.3	STANDARD
Oakland	🇺🇸	23	0.7611	74.2	STANDARD
Los Angeles	🇺🇸	5	0.7063	115.2	STANDARD
Manzanillo	🇲🇽	2	0.7212	152.9	HIGH
Long Beach	🇺🇸	1	0.8671	148.3	STANDARD
Veracruz	🇲🇽	1	0.7961	124.7	HIGH
Victoria	🇨🇦	1	0.9500	301.5	STANDARD
Portland OR	🇺🇸	1	0.6071	241.6	STANDARD

🇺🇸 San Francisco — Port Profile

27 detections · Avg score 0.7414 · Avg distance 80.3 NM

LOW RISK

Total Detections

27

Primary port of operation

Avg Alert Score

0.7414

Avg Distance NM

80.3

Port proximity zone

Detection Types at San Francisco

SPEED_ANOMALY

11

POSITION_JUMP

10

ZIGZAG

6

Coordinates: 37.775°N, 122.419°W

Port Intelligence Notes

Port Country

🇺🇸 US

Risk Classification

LOW — Standard port monitoring applies

Detection Share

27 of 61 total detections (44.3%)

Avg Distance from Port

80.3 NM — consistent with port proximity operations

🇺🇸 Oakland — Port Profile

23 detections · Avg score 0.7611 · Avg distance 74.2 NM

LOW RISK

Total Detections

23

Secondary port

Avg Alert Score

0.7611

Avg Distance NM

74.2

Port proximity zone

Detection Types at Oakland

POSITION_JUMP

11

SPEED_ANOMALY

9

ZIGZAG

3

Coordinates: 37.804°N, 122.271°W

Port Intelligence Notes

Port Country

🇺🇸 US

Risk Classification

LOW — Standard port monitoring applies

Detection Share

23 of 61 total detections (37.7%)

Avg Distance from Port

74.2 NM — consistent with port proximity operations

🇺🇸 Los Angeles — Port Profile

5 detections · Avg score 0.7063 · Avg distance 115.2 NM

LOW RISK

Total Detections

5

Secondary port

Avg Alert Score

0.7063

Avg Distance NM

115.2

Port proximity zone

Detection Types at Los Angeles

SPEED_ANOMALY

3

POSITION_JUMP

2

Coordinates: 33.729°N, 118.264°W

Port Intelligence Notes

Port Country

🇺🇸 US

Risk Classification

LOW — Standard port monitoring applies

Detection Share

5 of 61 total detections (8.2%)

Avg Distance from Port

115.2 NM — consistent with port proximity operations

🇲🇽 Manzanillo — Port Profile

2 detections · Avg score 0.7212 · Avg distance 152.9 NM

HIGH RISK

⚠ HIGH RISK PORT: Manzanillo is a known high-risk transshipment zone associated with illicit maritime activity. Detections here require elevated scrutiny.

Total Detections

2

Secondary port

Avg Alert Score

0.7212

Avg Distance NM

152.9

Port proximity zone

Detection Types at Manzanillo

POSITION_JUMP

1

SPEED_ANOMALY

1

Coordinates: 19.054°N, 104.318°W

Port Intelligence Notes

Port Country

🇲🇽 MX

Risk Classification

HIGH — HIGH

Detection Share

2 of 61 total detections (3.3%)

Avg Distance from Port

152.9 NM — consistent with port proximity operations

🇺🇸 Long Beach — Port Profile

1 detections · Avg score 0.8671 · Avg distance 148.3 NM

LOW RISK

Total Detections

1

Secondary port

Avg Alert Score

0.8671

Avg Distance NM

148.3

Port proximity zone

Detection Types at Long Beach

POSITION_JUMP

1

Coordinates: 33.754°N, 118.216°W

Port Intelligence Notes

Port Country

🇺🇸 US

Risk Classification

LOW — Standard port monitoring applies

Detection Share

1 of 61 total detections (1.6%)

Avg Distance from Port

148.3 NM — consistent with port proximity operations

🇲🇽 Veracruz — Port Profile

1 detections · Avg score 0.7961 · Avg distance 124.7 NM

HIGH RISK

⚠ HIGH RISK PORT: Veracruz is a known high-risk transshipment zone associated with illicit maritime activity. Detections here require elevated scrutiny.

Total Detections

1

Secondary port

Avg Alert Score

0.7961

Avg Distance NM

124.7

Port proximity zone

Detection Types at Veracruz

SPEED_ANOMALY

1

Coordinates: 19.197°N, 96.134°W

Port Intelligence Notes

Port Country

🇲🇽 MX

Risk Classification

HIGH — HIGH

Detection Share

1 of 61 total detections (1.6%)

Avg Distance from Port

124.7 NM — consistent with port proximity operations

🇨🇦 Victoria — Port Profile

1 detections · Avg score 0.9500 · Avg distance 301.5 NM

LOW RISK

Total Detections

1

Secondary port

Avg Alert Score

0.9500

Avg Distance NM

301.5

Possible spoofed coords

Detection Types at Victoria

POSITION_JUMP

1

Coordinates: 48.424°N, 123.370°W

Port Intelligence Notes

Port Country

🇨🇦 CA

Risk Classification

LOW — Standard port monitoring applies

Detection Share

1 of 61 total detections (1.6%)

Avg Distance from Port

301.5 NM — anomalously high, suggests spoofed coordinates

🇺🇸 Portland OR — Port Profile

1 detections · Avg score 0.6071 · Avg distance 241.6 NM

LOW RISK

Total Detections

1

Secondary port

Avg Alert Score

0.6071

Avg Distance NM

241.6

Possible spoofed coords

Detection Types at Portland OR

SPEED_ANOMALY

1

Port Intelligence Notes

Port Country

🇺🇸 US

Risk Classification

LOW — Standard port monitoring applies

Detection Share

1 of 61 total detections (1.6%)

Avg Distance from Port

241.6 NM — anomalously high, suggests spoofed coordinates

Ownership Intelligence

MMSI registry · Flag state analysis · Beneficial ownership investigation

Vessel Name

MORNING MIST

MMSI

338179507

Flag State (MMSI-derived)

🇺🇸 US

MID Code

338 → 🇺🇸 US

Primary Port

San Francisco

Detection Period

5 months (2024)

Registered Owner

Pending registry lookup

Beneficial Owner

Requires FinCEN CDD query

OFAC SDN Status

Pending cross-reference

Recommended Action

Physical inspection + full registry query

Vessel Type Analysis

AIS declared type · Physical capability vs. observed behavior

Type Mismatch Assessment

AIS Declared Type

vessel_type=37 (Pleasure Craft)

Behavior Consistency

Requires investigation

Speed Capability

Reported 102.2 kn — physically impossible for Type 37 (max ~45 kn high-performance)

Inspection Priority

HIGH — Recommend USCG/CBSA physical boarding and documentation review

Applicable Statutes

47 C.F.R. § 80.953 (AIS falsification) · 33 C.F.R. § 164.46 (AIS carriage) · 21 U.S.C. § 955 (maritime drug law)