From: Joe@schmoe.com (Joe Schmoe) Newsgroups: rec.radio.scanner,rec.radio.amateur.misc Subject: "Bug" Frequencies Date: Mon, 04 Dec 1995 18:27:11 -0800 Organization: SchmoeCo. Found at: http://www.tscm.com/bugfreq.html Major "Real-World" Bugging Frequencies Common Wireless Bugs (Low Power - Well under 35-50 mw) 44.500 - 51.000 mhz "Baby/Room" monitors 72.100 - 75.400 mhz Hearing Assistance systems 54.000 - 150.000 mhz "Kit" Bugs 98.000 - 108.000 mhz Cheap out-of-band FM Bugs 112.000 - 142.000 mhz Cheap out-of-band FM Bugs 140.000 - 160.000 mhz Cheap out-of-band FM Bugs 60.000 - 320.000 mhz Low Cost kit bugs 25.000 - 450.000 mhz European/English Kit Bugs 150.000 - 216.000 mhz Typical VHF "Body Wire" & Pro-Grade Bugs 138.000 - 174.000 mhz Typical "Spy Shop" & LE Cheap VHF Bug 140.000 - 150.000 mhz Popular Xandi Flea power kits 150.000 - 170.000 mhz Popular Japanese Flea power kits (under 5mw) 150.000 - 220.000 mhz Commercial Wireless Microphone 470.000 - 608.000 mhz Commercial Wireless Microphone 730.000 - 806.000 mhz Commercial Wireless Microphone 889.000 - 960.000 mhz Cordless Phones (S/S & Hoppers) 380.000 - 480.000 mhz Video Bugs - US 890.000 - 960.000 mhz Video Bugs - US (902-928 Hot) 905.000 - 928.000 mhz Video/Audio Consumer Products (i.e.: Recoton) 1.700 - 1.930 ghz Video Bugs - US 2.400 - 2.500 ghz Video Bugs - US *** VERY Popular *** 5.725 - 5.850 ghz Video Bugs - US *** VERY Popular *** 1.100 - 1.400 ghz PAL Video Bugs *Very Hot in England/France/etc* 2.400 - 2.500 ghz PAL Video Bugs *Very Hot in England/France/etc* 3.500 - 4.500 ghz PAL Video Bugs *Very Hot in England/France/etc* "Tactical" Bugs 225 - 400 mhz "Throw away" bugs (10uw-300mw Beer can bugs) 290 - 330 mhz Micro-powered Bugs (5uw-10mw Cigarette Butt Bugs) 30 - 500 mhz Tactical Repeaters (75mw-300mw) 285 - 400 mhz Tactical Repeaters (50mw-10watts) 100 - 152 mhz VHF Tactical Repeaters (300mw-25watts) 135 - 174 mhz VHF Tactical Repeaters (300mw-25watts) Carrier Current Bugs 9khz - 490 khz Carrier Current 47 CFR 15.219 Authorization 490khz - 1.705 mhz Lossy Cable 47 CFR 15.221 Authorization 3 - 200 khz 300 mw High Grade Pro Bugs (over 500$ each) 100 - 200 khz 50-100 mw Older Bugs 120 - 200 khz 30-50 mw Pre 1990 intercoms 200 - 300 khz 30-50 mw Post 1990 intercoms 300 - 400 khz 250-400 mw TELCO Line transmitters (355khz popular) 100 - 450 khz Threat Window #1 Most CC Bugs 3khz - 3 mhz Threat Window #2 Expensive "Pro-Grade" Bugs 5khz - 32 mhz Threat Window #3 Popular WJ Carrier Current Rcvr 3khz - 50 mhz Threat Window #4 Realistic Threat Window for Telephone Wire WECO Bugs "boosted/ultrasonic audio" found on Power/CATV/Telco lines 64kbps to 1.5mbps Digital Bugs T-Carrier-Lo (T-1 and Below) 1.5mbps to 50mbps Digital Bugs T-Carrier-Hi (T-1 and above) 2.048mbps Digital Bugs Definity Circuit Pack Bug 32mbps Digital Bugs TMS Channel/Backplane bridge Designed to transmit on CC or Microwave Spread Spectrum (2.4-6.0ghz) Spread Spectrum/Hopping Bugging Frequencies Legit Equipment 902 mhz - 928 mhz ISM band A 2400 mhz - 2484 mhz ISM band B 5725 mhz - 5850 mhz ISM band C Outband Equipment ANY Television broadcast frequency ANY FM radio broadcast frequency 820 mhz - 960 mhz Modified (902-928) Cordless Telephones Commonly Used Law Enforcement Bugging Frequencies 37.000 - 952 mhz FCC Surveillance Blanket Authorization 47 CFR 90.19 "Physical surveillance, stakeouts, raids..." Straight AM/FM, FM-Subcarrier, SSB, Spread Spectrum, and Hoppers. If encrypted, it usually uses single in-band voice inversion. (Normally well under 2 watts... most under 1/10th watt) 148 - 174 mhz 135 - 250 mhz Out-band Wireless Microphone 174 - 216 mhz In-band Wireless Microphone 350 - 440 mhz Common Video Freqs 380 - 930 mhz Wide Band Hoppers 806 - 824 mhz 851 - 869 mhz 929 - 930 mhz Popular Audio/Video Band 1.4 - 1.5 ghz Common Video Freqs 1.7 - 1.9 ghz Common Video Freqs (1.710 - 1.755 REAL Popular at 1/10 watt) 2.4 - 2.5 ghz Common Video Freqs (2.400 - 2.450 REAL Popular) 8.5 - 10.8 ghz Common Video Freqs 25 - 50 mhz Popular Vehicle Monitoring Systems "Bumper Beepers" 150 - 170 mhz Popular Vehicle Monitoring Systems "Bumper Beepers" 450 - 512 mhz Popular Vehicle Monitoring Systems "Bumper Beepers" 903 - 904 mhz Popular Vehicle Monitoring Systems "Bumper Beepers" 904 - 912 mhz Popular Vehicle Monitoring Systems "Bumper Beepers" 918 - 926 mhz Popular Vehicle Monitoring Systems "Bumper Beepers" 926 - 927 mhz Popular Vehicle Monitoring Systems "Bumper Beepers" Commonly Used by Federal Agencies for Bugs, Wireless Microphones, and Body Wires (also 138-220 mhz, and 399-420 mhz, under 25-50 mw). 149.3500, 165.9125, 167.3375, 167.3425, 167.4875, 168.0115, 169.2000, 169.4450, 169.5050, 170.2450, 170.3050, 171.0450, 171.1050, 171.4500, 171.6000, 171.7500, 171.8450, 171.8500, 171.9050, 172.0000, 172.2000, 172.2125, 172.2375, 172.2625, 172.2875, 172.3125, 172.3375, 172.3625, 172.3875, 172.5500 173.3375 27.5750 Customs Low Power < 5 watts 27.5850 Customs Low Power < 5 watts 163.1000 Customs Low Power < 30 watts 418.5750 Customs Low Power < 30 watts 40.1700 Federal Shared Mobile Locator Tranmitters "Bumper Beepers" 40.2200 Federal Shared Mobile Locator Tranmitters "Bumper Beepers" 164.9125 FBI Surveillance 165.9125 ATF F5 Surveillance 166.2875 ATF 170.4125 ATF 407.8000 Secret Service 406.2750 Secret Service 408.5000 Secret Service 408.9750 Secret Service 172.2000 DOJ/DEA CH.1 171.6000 DOJ/DEA CH.2 418.0500 DEA Low Power 418.0750 DEA Low Power 418.5750 DEA Low Power 418.7500 DEA 418.6750 DEA 418.9000 DEA F2 CINDY (416.325) Surveillance 418.7500 DEA F3 GAIL Surveillance/Strike Force 418.6750 DEA F4 EMILY (416.325) Surveillance 407.8000 CIA, State Department 408.0500 Federal Shared 408.5750 Federal Shared 409.4000 Federal Shared Also, Wide Band Frequency Hopping centered on various UHF-TV channels (ie: 510 mhz with a hopping width of +/- 25 mhz) Summary (this will catch 99% of all RF bugs) All TSCM Inspections should include the following frequencies: (Expect to see less than 10-35 mw maximum at the antenna) Use a digital spectrum analyzer and a wideband receiver with an analog SDU on the IF The Spectrum Analyzer inspection should cover at least 3khz to 33/40 ghz Carrier Current Bugs 3 khz to 50 mhz 99% Voice Free RF Bugs-HF 3 khz to 50 mhz 99% Voice Free RF Bugs-VHF 30 mhz to 300 mhz 10% Video/80% Voice/10% Data Free RF Bugs-UHF 300 mhz to 900 mhz 25% Video/60% Voice/15% Data RF - Microwave1 900 mhz to 3.0 ghz 70% Video/20% Voice/10% Data RF - Microwave2 3 ghz to 18.5 ghz 75% Video/15% Voice/10% Data RF - Microwave3 18.5 ghz to 40.0 ghz 75% Video/ 5% Voice/20% Data ...and of Course Infrared! 700 - 1100nm Audio Transmitters (CF between 880 and 950nm) 950 - 1710nm IR Video Illuminators