1. A computer implemented method comprising receiving maritime vessel automatic identification system (AIS) data from a vessel; determining that the maritime vessel AIS data includes anomalous data; estimating a likelihood of malicious vessel intent based on a comparison of the anomalous data to secondary data, wherein the likelihood of malicious vessel intent corresponds to a likelihood of an AIS spoofing attempt; and in response to the likelihood of malicious vessel intent satisfying a threshold, generating an alert that includes an indication of an inferred intent for the vessel.