─ Area: ENG: Shortwave ─────────────────────────────────────────────────────── Msg#: 22 Date: 06 Apr 96 22:01:11 From: Russ Leblanc Read: Yes Replied: No To: All Mark: Subj: [1/3] More Numbers Statio ────────────────────────────────────────────────────────────────────────────── >>> Part 1 of 3... Here's more numbers stations info from another web site- Russ Spy Numbers Stations Shortwave Spy Numbers Stations: This is my Spy Numbers Station page, intended to be a repository for information about numbers stations. You know, those strange shortwave stations with the YL reading off a series of numbers. I'm working on creating as complete of a schedule of known numbers stations broadcasts as possible. You can help by emailing submitting (via a form)me your loggings of numbers stations. I'll merge them together here into one master listing. Other bizarre stations (phonetics, musical notes, etc) are welcome also of course. Numbers Stations Mailing List I have created a Mailing List of Numbers Stations reports over the previous week. Email me if you'd like to be added to the list. Email me at cps@access.digex.net Contents: A description of the types of Spy Stations heard My Compilation of Numbers Stations Schedules - Updated 23 December, 1995. Numbers Stations loggings submitted by listeners. A brief description of Numbers Stations. A schedule of numbers stations operations (somewhat out of date). One person's explanation of how Numbers Stations function. Mike Chace's Numbers page. A very detailed description of several stations, along with operating schedules. http://www.ibmpcug.co.uk/~irdial/conet.htm (CONET) - They're producing a CD of Numbers Stations, check them out. Composite Schedule of Numbers Stations Broadcasts 23 December 1995 kHz UTC Day Sex Lang Last Type 3090 2225 Channel Marker L 3150U 2000 YL EE Mossad 5F groups 3195U 2040 Channel Marker R 3262U 2030 YL GG Number Stn GK 3/2F 3262CW 2100 Channel Marker P then Navy Kaliningrad 3280CW 1900 5F Groups 3280CW 2000 5F Groups 3280CW 2100 YL MOI Prague, 5F groups 4018U 1753 "Russian Man" Numbers Station 4025 0600 YL SS 4029 0500 MFSa YL SS 5 digit 4029 0600 M YL SS 5 digit 4030 0230 W YL EE 11/8/95 5 digit,Repeat of 5320@0130 4165 0247 W YL EE 11/8/95 young woman, much QRM 4301U 2043 Channel Markers C & S 4460 0300 Tu YL EE 12/5/95 5 digit, Irish Accent. 4468U 2200 Mossad 5F groups, FTJ station 4470 0100 TuWThSa YL EE 3/2 digit, carrier on a while before bcst 4470 0130 M YL EE 3/2 digit 4487U 1355 Polish Bulgarian Betty Numbers Station 4560U 2101 Mossad, msg to YHF 4570 0300 W YL EE 11/22/95 5 digit, rpt of 5412@0200 4575 0400 Su YL EE 5 digit 5046 0100 WThSu YL EE //4470, "Warrenton Woman" 5046 2300 MTu YL EE 3/2 Digit 5091U 2030 Mossad 5F, station call JSR 5133U 0400 Su YL SS 5 digit 5205U 1730 "Cynthia counting station" 5300U 0422 W YL GG 3/2 digit 5301U 0400 W YL RR 11/22/95 5 Digit, Russian YL 5305U 2230 Channel Markers C & S 5320 0130 W YL EE 11/8/95 5 digit, end with # of groups, 0000 5412 0200 W YL EE 11/22/95 5 digit, British sounding YL 5417 0500 M YL SS 5 digit 5417 0700 MFSu YL SS 11/24/95 5 digit, preceeded by AIIAW in CW 5420 0100 W YL SS 11/15/95 5 digit 5525L 0237 M YL EE 517,517,517,1234567890 repeated 5716 2100 M YL EE 3/2 digit, parallel w/6796 & 7410 5740 0309 M YL EE 5/5 digit, older woman, until 0330 5750 0320 Su OM EE 5 digit, "British Man" 5752 0400 Su YL EE 11/26/95 5 digit 5763 0400 M YL SS 5 digit 5763 0600 WSa YL SS 5 digit, rpt of 7527@0500 6030 0000 M CW 4 digit 6201U 1700 Swedish Rhapsody number station 6227 0300 Th YL SS 5 digit 6500 0035 Tu YL EE 12/5/95 Phonetics. 5 ltr groups. 6715U 1630 "Nancy Adams Susan" Number Station 6723U 0200 Tu OM EE 5 digit, Irish??? Accent 6766 0400 FSa YL SS 11/25/95 5 digit 6768 0400 Sa YL SS 11/18/95 5 digit, rpt of 6786@0200 6768 0800 Sa YL SS 11/18/95 5 digit 6785 0600 W YL SS 5 digit 6786 0200 Sa YL SS 11/18/95 5 digit 6797 0600 F YL SS 5 digit 6797 1000 S YL SS 5 digit 6797 2100 M YL EE 3/2 digit, parallel w/5716 & 7410 6798 0300 F YL SS 11/17/95 3/2 digit 6798 0500 Th YL SS 11/23/95 5 Digit, same YL as 6934 6798 0800 F YL SS 12/1/95 5 digit 6813 0739 W YL EE 3/2 digit 6815 0700 ThF YL EE 3/2 letter groups, // 8075 6815 1908 M YL EE 3/2 digit, repeated at 1928 6825 0200 W YL SS 5 digit, "Squeaky Girl" 6826 0300 SuMW YL SS 11/20/95 5 digit, same YL as 8136. 6840 0200 Tu YL SS 4 digit 6840 0230 Daily YL SS 4 digit, // 9958 6840 0300 M YL SS 4 digit 6840 2230 W YL EE 11/22/95 EZI Phonetics, // 9130 6870 0300 M YL SS 5 digit 6880L 1340 Su OM EE 12/10/95 5 Digit 6934 0500 Th YL SS 11/23/95 5 digit, same YL as 6798 6935 0400 Su YL SS 5 digit, "Squeaky Girl" 6959 2200 M YL EE 10/30/95 5 Digit, Lincolnshire Poacher 6970 0230 Su OM EE 5 digit, "British Man" 6983 0200 F YL SS 11/17/95 5 digit 7039CW 1411 Channel Marker C 7410 0500 Sa YL SS 5 digit 7410 2100 M YL EE 3/2 digit, parallel w/5716 & 6797 7482 0300 F YL SS 11/17/95 5 digit 7482 0400 Th YL SS 11/9/95 5 digit, strong signal in Maryland 7490 0200 Su YL EE 11/26/95 5 digit 7521 0200 Th YL SS 5 digit 7527 0500 Sa YL SS 5 digit, rpt 5763@0600 7527 0700 Tu YL EE 5 digit, rpt 8137 7527 0800 Tu YL SS 5 digit, rpt 8137@0800 7541 0030 Daily YL EE 4 digit 7570 0200 Th YL SS 11/9/95 5 digit 7580 1515 Su YL SS Starts "Attencion" 7581 0200 Th YL SS 11/30/95 5 digit, carrier drop after each group 7582 0200 Tu YL SS 11/14/95 5 digit 7583 0000 Sa YL SS 11/18/95 5 digit 7681 0400 W YL SS 5 digit 7726 0500 Su YL SS 11/26/95 5 digit, LSB+carrier 7763 0130 Daily YL EE 4 digit 7836 0300 FSa YL SS 11/25/95 4 Digit 7846 0700 F YL SS 5 digit 7862 0300 FSa YL SS 11/25/95 5 digit 7887 0300 Su YL SS 5 digit 7887 0700 Sa YL SS 5 digit 7887 0800 F YL SS 5 digit 7890 0200 W YL SS 11/15/95 5 digit 7918 0415 Su YL EE Phonetics, British accent 7975 0800 Th YL SS 11/30/95 5 dig, Very strong signal in Calif 8010 0400 W YL SS 4 digit 8010 0500 W YL SS 11/29/95 5 digit 8025U 0650 W YL EE 11/29/95 Ended with CIO CIO 8025U 2150 Th YL EE 11/22/95 Phonetics 8027 0800 F YL EE 11/24/95 ??? 8060U 0630 F OM EE 11/30/95 5 digit 8062U 0630 W OM EE 11/29/95 5 digit 8075 0700 F YL EE 3/2 letter groups, // 6813 8136 0100 W YL SS 11/15/95 5 digit 8136 0300 W YL SS 11/15/95 5 digit, FM, mix w/R Havana Cuba! 8137 0300 W YL SS 5 digit 8137 0500 Su YL SS 5 digit, rpt 9154@0600 8137 0700 Tu YL SS 5 digit, rpt 7527@0800 8142U 1400 NumberStation Prague OLX 8160 0600 M YL EE 5 digit, rpt Tu@0600 & 7527&0700 8186 0200 SuM YL SS 11/26/95 5 digit, S9+60dB in Maryland! 8186 2100 Th YL EE 11/23/95 3/2 digit 8495CW 1428 Channel Markers C & S 8630U 1534 Su YL SS 5 digit 9024 0200 W YL SS 11/15/95 5 digit, "Attencion 616 06 03" 9073 0200 Th YL SS 11/30/95 new YL voice 9114 0300 M YL SS 5 digit 9130 2000 W YL EE 11/22/95 Phonetics, presumed Mossad 9130 2100 W YL EE 11/22/95 EZI Phonetics, presumed Mossad 9130 2230 W YL EE 11/22/95 EZI Phonetics, // 6840 9140 0200 M YL SS 5 digit, // 9227 & 9230 9140 0200 Tu YL SS 5 digit 9154 0600 Su YL SS 5 digit, rpt 8137@0500 9219 0130 W YL SS 11/22/95 3/2 digit 9219 0600 Th YL EE 11/30/95 3/2 digit 9223 0200 Tu YL SS 4 digit, // 6840 9223 0200 Th YL SS 4 digit 9223 0300 Sa YL SS 3/2 digit, // 10665 9227 0200 M YL SS 5 digit, // 9140 & 9230 9227 0200 Tu YL SS 5 digit 9230 0200 M YL SS 5 digit, // 9140 & 9227 9230 1000 Sa YL SS 5 digit 9240 0600 W YL SS "Attencion 75476" 9613 0400 Su YL SS 5 Dgt, sounded sleepy "Lazy Spaniard" 9958 0230 Daily YL SS 4 digit, // 6840 10665 0300 Su YL SS 3/2 digit, // 9074 10665 0300 Th YL SS 4 digit, // 9074 10665 0300 Sa YL SS 4 digit, // 9223 10872CW 1410 Channel Markers C & S 10921 0410 Su YL EE 5 Digit 11490 1823 W YL EE Very faint, past 1850 11490 1830 Daily YL SS 4 digit, // 16310 11492 0045 M YL EE 3/2 digit 11545U 1500 W YL EE 11/22/95 Lincolnshire Poacher, //13375,15682 12201 0020 Tu OM EE 10/95 5 Digit 12270 1530 Su CW CW 4 Digit, Turkey TA7 ? 12603U 1702 "Lincolnshire Poacher" Number Stn 11375U 1500 W YL EE 11/22/95 Lincolnshire Poacher, //11545,15682 13528U 0815 "Noi Noichen" Number Station 13636CW 1422 Channel Markers C & S 14487U 1200 W YL EE 11/22/95 Lincolnshire Poacher, //15682,16084 14487U 1400 W YL EE 11/22/95 Lincolnshire Poacher, //15682,16084 14487U 1700 W YL EE 11/22/95 Lincolnshire Poacher 15682U 1200 W YL EE 11/22/95 Lincolnshire Poacher, //14478,16084 15682U 1400 W YL EE 11/22/95 Lincolnshire Poacher, //14478,16084 15682U 1500 W YL EE 11/22/95 Lincolnshire Poacher, //11545,13375 15980 1200 W YL EE 11/22/95 5L Phonetics 16084U 1200 W YL EE 11/22/95 Lincolnshire Poacher, //14478,15682 16084U 1400 W YL EE 11/22/95 Lincolnshire Poacher, //14478,15682 16310 1830 Daily YL SS 4 digit, // 11490 16380 1900 W CW CW 11/8/95 5 digit, 35 wpm 19715 1134 Su YL EE 11/19/95 Phonetics 17016CW 1420 Channel Markers C & S 25250 1346 Channel Marker R An L or U after the frequency indicates LSB or USB. I've created a new column called "last". This will be the last date a particular broadcast was reported. It should be useful to help determine which schedules are still active. The date is in US format: mm/dd/yy. Please feel free to email me with your numbers stations loggings, so that all may share. Chris Smolinski cps@access.digex.net In response to recent questions about the "Numbers" Stations, their origin and purpose, the following summary captures the high points. "Spy Numbers Transmissions" are a shortwave oddity which have been around for the last 25 years. They are commonly heard in English, German, Spanish and the Slavic languages and take the form of four and five digit groups of numbers which are preceded by a three digit "identifier" and a "group count" which corresponds to the number of number groups transmitted in the crypt. They are generally broadcast by a mechanical- sounding YL, although Morse code (CW) "cut number" transmissions are also frequently reported, as are phonetic alphabet trans- missions. Several distinctly different formats have been noted. The "who" and "why" aspects of these transmissions are, for the most part, unknown. Their mysterious nature has resulted in their common characterization as 'spy' trans- missions. Information on the "where" aspects below. The spy theory has been enhanced over the years by the FCC's inconsistent position in response to numerous inquiries by the Shortwave Listening community. If you've never heard a numbers transmission, tune your radio to 11468 kHz any Saturday at 4pm EST (2100 UTC). You'll almost certainly hear a 'classic' numbers transmission which will run from 15-30 minutes. The signal from this Saturday transmission is very powerful and can be heard across the United States. In regards the "where" - a number of sites have been identified in recent years, notably in Warrenton and Remington, VA and Miami, FL. In addition, with the aid of sophisticated RDF (radio direction finding) equipment and the invaluable assist- ance of highly authoritative and professional resources, several new transmission sites have been positively identified over the past several months, including sites in Nicaragua, Honduras, El Salvador, Cuba and Cozumel. One particularly dangerous station has been interfering with air to ground traffic on 6577 kHz, a frequency allocated to inter- national aeronautical communications in the busy Caribbean sector. On at least one monitored transmission, the air traffic controller at ARINC moved the pilot to an alternate frequency as the numbers transmission was totally blocking the frequency from effective use. This regular transmission can be heard on Mondays at 0200 UTC (Sunday night local US time) across most of the US. A recently identified Cuban site (Guineo) is believed to ba a major transmitter site used by DGI (Cuban Intelligence). There has been some suggestion that the numbers are a form of 'one-time-pad' - a crude but unbreakable form of encryption (unless you've got the key, that is) - if that's the case, it's very curious to note that the same five-digit groups are often seen to repeat over and over again in the very same crypt - and that the same transmissions are seen to repeat from week to week, and from month to month - so often, in fact, that tape breaks are sometimes noted. When spliced back together, the sloppy handling sometimes results in truncated 5-digit groups - the end result being amixture of 4 and 5 digit groups in the very same transmission! These facts would tend to point one away from the one-time-pad concept and support a couple of other theories - suggesting that the numbers are NOT a cipher, but rather a code unto themselves, and that much of this traffic is 'dummy' in nature - broadcast simply to keep a frequency open over a long period of time. In addition, most five-digit Spanish numbers transmissions are very badly over-modulated, resulting in numerous spurs up and down frequency. When broadcast under such conditions, the numbers (6) seis and (7) siete are almost indistinguishable, making it impossible to copy a crypt without numerous errors. It is worth noting that the four-digit Spanish and English transmissions do not reflect this same technical ineptitude. There are a number of reference materials available which provide detailed information about cryptography and cryptanalysis, in general, and numbers crypts, specifically. I'd be happy to provide anyone interested with a list of books. Only two publications I know of are currently available which provide regular coverage of numbers, clandestine, pirate and other interesting transmissions. The ACE Bulletin (monthly news- letter of the Association of Clandestine Enthusiasts - PO Box 11201, Department KK, Shawnee Mission, KS 66207 $16/yr) and the Umbra et Lux Newsletter (a newsletter devoted to SIGINT, covert radio and related topics - 10606-8 Camino Ruiz, Department KK, Suite 174, San Diego, CA 92126 $18/yr). Havana Moon Types of Shortwave Spy Numbers Stations 4 Digit Spanish YL 5 Digit Spanish YL 4 Digit English YL 5 Digit English YL Lincolnshire Poacher 3/2 Digit English YL 4 Digit German YL 5 Digit German YL Mossad Stations 4 Digit Spanish YL This is a fairly commonly heard format, though not as often heard as the five digit variety. The transmission starts with a three digit block repeated three times, followed by a count, such as "376 376 376 1234567890". This is sent for several minutes, and is followed by a series of tones. Then the number of message blocks to be sent is give, for example "grupo 87". Then the four digit message blocks begin. The message is terminated with "fin". Four digit numbers stations generally have excellent technical quality. They may be the "real" messages (as opposed to training exercises), or just run by better funded spies! 5 Digit Spanish YL This is by far the most commonly heard type of numbers station in North America. There appear to be two distinct types of transmissions. The first format starts off with "attencion", then a five digit block, such as "Attencion 38952". This repeats for several minutes, and is followed by "38952 150" repeated several times, where the "150" is the number of groups to be sent in the message. Note that there are ALWAYS 150 groups in this format. The message is then sent, and the transmission closes with the word "final" either two or three times. The second variation is slightly different. This format starts off with an opening such as "Attencion 726 01" with a distinct pause between the third and fourth digit. This is repeated for several minutes, and then "01 49" might be sent several times. Note that the last two digits of the 5 digit opening ID is always the same as the first two digits of the second number sent, in this case "01". The "49" is the number of groups to be sent in the message. This number varies. The message is then sent, and this is followed by "final", usually twice. It is not unusual for a second transmission to begin immediately after the first one ends. It is my personal belief that this second variation represents actual messages being sent, while the first format (always 150 groups) is used for either training exercises, or perhaps as some sort of control message. AM modulation is sometimes used, although SSB is also reported. I have heard many stations which seem to be using reduced carrier sideband, with modulation on one of the sidebands, and a lower power carrier, sufficient for reception on AM receivers. These transmissions often have technical problems (poor audio, hum, distortion); sometimes big "accidents" like starting to play the Radio Habana opening music! 4 Digit English YL These transmissions start with a three digit block (presumed to be the recipient number repeated for several minutes. No message length is sent. A 1234567890 count is then heard, often followed by some tones. Then the five digit message blocks begin. 5 Digit English YL These transmissions start with a three digit block (presumed to be the recipient number repeated for several minutes. Then a two group block is sent, such as"284 109", where the second group (109 in this case) is the length of the message to be sent.. Then the five digit message blocks begin, usualy with each group repeated. The accent of the female announcers of the five digit stations often varies. Some are distinctly Britsh, some Spanish, others sound American. This may indicate that there are several organizations operating the various stations. Or, as with many "facts" about Numbers Stations, it may mean nothing at all! Lincolnshire Poacher 5 Digit English YL This is a variation of the five digit English station. The tune "Lincolnshire Poacher" (which sounds like "Pop Goes The Weasel" is played at the beginning of the transmission. This station is most often heard in Europe and the eastern part of North America. I have often heard it being jammed. Reports indicate that transmitters in Cyprus are used, with the Middle East as the target area. 3/2 Digit English YL These transmissions are very similar to the five digit transmissions, except that a distinct pause is heard between the third and fourth digits of each message block. It is not known if this signifies a different encryption system than used in the five digit transmissions. 4 Digit German YL Similar to the five digit German stations described below. Rarely heard (at least in North America). 5 Digit German YL These transmissions often open with tones or some sort of music. Sometimes, a two letter phoentic phrase is heard, such as "Papa Romeo". The preamble opens with "achtung" and a three digit block, generally presumed to be the recipient. (Perhaps it is really the number of the one time pad to be used to decode the message, and the two letter phonetic sent at the beginning is the recipient. This makes sense to me because the agents would listen at the beginning of the transmission to see if the message is for them.) This is followed by "gruppen" and the number of message blocks to follow. The message closes with "ende".Commonly heard in Europe, and North America. This would tend to indicate a European transmission site. Indeed, several years ago, transmissions were DFed to a then East German location. 3 Letter Phonetic (Mossad) A female voice is used to repeat a three letter phonetic phrase (followed by a number), such as "Papa November Oscar Two". This can go on for hours before a message is sent. The message is generally blocks of phonetic letters.It is believed that Mossad (the Israel Intelligence Service) operates these stations, and they are often referred to as Mossad transmissions. If the number is a One, a message will follow, if the number is Two, no message follows. Last updated 10 March 1996 ----------end of posting, that's all folks-------------- .