About the incident

• Place of incident: village Kafr Jallis  in Idlib governorate
• Impact site: Residential camps for the displaced in the vicinity of the village (Maram camp -Watan, Wadi Haj Khaled, Kafr Rouhin Water Station Camp, Morin Village Camp, Baeiba Camp) west of Idlib
• Date: Sunday, 6 November 2022
• Time: Around 06:50 and 07:15 Damascus time
• Victims: 10 people, including four children and two women, and approximately 75 people were injured
• Type of attack: Surface-to-surface missiles carrying what appear to be cluster bombs, preceded by alleged fixed-wing air strikes near the impact site
• Munitions likely used: rockets (220mm 9M27-K) and (300mm 9M55k) loaded with cluster bombs (9N235)
• Potentially responsible: Syrian government forces and the Russian Air Force

Introduction

On the morning of 6 November 2022, six camps for internally displaced persons were attacked between the hours of 6:50 and 7:15 resulting in the deaths of 10 individuals and the injury of approximately 75 others. All available open source information points to Syrian government forces and the Russian Air Force being responsible for the attack.

One day before the incident, on November 5, 2022, the Russian Center for Reconciliation in Syria warned that what it called Jabhat al-Nusra (Hayat Tahrir al-Sham) planning to carry out a provocation in the camps for the displaced in the Syrian province of Idlib. Sputnik website in Arabic quoted the deputy head of the Russian Center for Reconciliation between the Warring Parties, Major General Oleg Egorov, saiding: “According to the information received by the Russian Center for Reconciliation between the Warring Parties, the terrorist (Al-Nusra Front) fighters along with the (White Helmets) organization, which operates fakely with a humanitarian cover, are planning to carry out provocations in Idlib Governorate,” Egorov identified the area with the refugee camps in Kafr Daryan and Kafr Jallis in the Idlib governorate.

Six campsites in the village of Kafr Jallis and its surroundings were hit in alleged airstrikes, possibly with cluster rockets.  The attack came after air strikes from fixed-wing aircraft on an area near the camps, which the Syrian government forces claimed were training camps for Hayat Tahrir al-Sham, on Sunday morning, November 06, 2022, between 06:50 and 07:15 Damascus time.

The strikes resulted in the killing of 10 civilians from the forcibly displaced camp residents, including allegedly four children and two women -  a further 75 other people were allegedly injured during the attack, according to the statement shared by Syrian Civil Defense. The strikes additionally resulted in the burning of many tents and causing material damage to their contents.

Videos and pictures uploaded to social media and websites, from sources both loyal to and opposed to the Syrian government, showed the moments cluster rockets were launched, as well as the moment of strikes on what the Syrian government and Russia claimed were military sites of Hayat Tahrir al-Sham. Posts additionally showed the initial moments after the attack including the transfer of those injured to hospitals and the burning of tents in the Maram camp in the village of Kafr Jallis.

Methodology

Syrian Archive conducted an investigation of the strikes, based on:

• Preserving, analyzing, and verifying 200 video clips, photos, and reports uploaded to social media that show the impact site, the first moments of the attack, the alleged weapon used, the direction of the shelling, the destruction that affected the place, and alleged casualties.
• Corroborating the location of the impact site by matching the visible landmarks in the visual content with satellite images and the first reports of the incident.
• Analysis of satellite images showing impact sites, in addition to two videos from a drone of one of the impact sites at the moment it was hit.
• Adding a new layer of verification, by analyzing videos of the moment of the attack and the surrounding area, in addition to analyzing pictures of the alleged remains of a weapon used.

This investigation was the result of multiple stages of analysis of available open source information which provided information related to the date, time, and location of the incident, as well as the victims, munitions allegedly used, and the party allegedly responsible for the strikes and resulting damage. By examining all available information on the strikes, this investigation provides an understanding of the incident and well as the possible perpetrators. The full research methodology of Syrian Archive is available on our site.

About the impact site

The impacted site is located in the outskirts of the village of Kafr Jallis. Kafr Jallis is in the Ma’arat Misrin district, Idlib governorate. Additionally, Kafr Jallis is included in the first de-escalation zone of the ceasefire agreement in northwestern Syria, agreed to on March 5, 2020. Agreed to by Turkey and Russia, the de-escalation zone was intended to prevent further civilian displacement in Idlib where services and resources were already scarce.

Map from 2017 shows the de-escalation zones, Kafr Jallis is in the first de-escalation zone

Syrian Archive was able to locate impact sites in six nearby camps, within a radius of about 2,800 meters, in the outskirts of Kafr Jallis. Syrian Archive also identified the site of three strikes outside residential areas.

A map created by Syrian Archive of verified impact sites on satellite imagery from Google Earth taken on 1 October 2021. 

This specific incident resulted in the bombing of several camps most notably the Maram camp, which was established with the support of the United Nations High Commissioner for Refugees. According to Maram Foundation page on Facebook the camp housed about 900 families at the time of the attack.

Maram camp in 2021 in a picture by Omar Haj Kaddour/AFP and posted by Maram Foundation

This investigation will focus on the strikes that hit Maram camp, as well as a nearby area the Syrian government and Russia government claimed was a training camp for fighters from Hayat Tahrir al-Sham.

What happened (and when)?

Available information indicates that between 06:50 and 07:15 am, Damascus time, on Sunday, November 6, 2022, six camps were hit with air strikes and rocket launchers carrying cluster bombs (see Weapons Used section of the investigation). The six camps (Maram camp, Watan camp, Wadi Haj Khaled camp, Kafr Rouhin Water Station camp, Morin village camp, and Baeiba camp) are located west of Idlib. The Syrian Ministry of Defense claimed these areas were training camps and command centers belonging to Hayat Tahrir al-Sham.

The attack resulted in the killing of ten civilians, including four children and two women. More than a hundred tents were burnt and damaged, the majority in Maram camp near the village of Kafr Jallis. Animals were killed and surrounding properties were damaged as a result of the attack. 

Geolocation

The first location: Maram camp and the impacted sites within it

Geolocation of impact sites

A video published by the Maram Foundation on its Facebook page shows the camps in the area, including the Maram camp near the village of Kafr Jallis, west of Idlib. The video shows a large number of tents and caravans that housed thousands of displaced families at the time of the attack. The camp is built in a mountainous area and is divided into large sectors. There are additional unofficial camps nearby.

A satellite image from Google Earth of Maram camp taken on 12 November 2021.

Screenshot from a video of Maram camp in Kafr Jallis posted by Maram Foundation’s Facebook page on 28 September 2022 and acquired by Syrian Archive on 6 January 2023.

Syrian Archive has matched satellite images with the location of impacted sites:

Matching the landmarks in a screenshot from a Maram Foundation video with satellite imagery from Google Earth taken on 12 November 2021 at the first impact site.

Matching the landmarks in screenshot from a Maram Foundation video with satellite images from Google Earth  taken on 12 November 2021 at the first impact site at points (2-3-4)

A video published by Qasioun News Agency shows the place where one of the rockets fell near a tent, resulting in the tent being almost completely destroyed. The video also documents remnants of one of the rockets allegedly used in the attack. Syrian Archive confirmed the location of the impact site by comparing it with satellite images.

Screenshot from a video by Qasioun News Agency—posted on 6 November 2022 and acquired by Syrian Archive on 17 December 2022—and a screenshot of the location from Google Earth satellite imagery.

 Video published by the Syrian Press Center shows the remnants of what appears to be a projectile, as well as a crater in the corridor between the shade and a rock elevation and a tent. The direction of the crater shows the launching of rockets from the southeastern side.

Screenshot from a video by Syrian Press Center—posted on 6 November 2022 and acquired by Syrian Archive on 17 December 2022— showing what appears to be a crater allegedly created by the munition used in the attack, and the potential direction of the first rocket, shown on satellite imagery on Google Earth and taken on 1 October 2021.

Syrian Archive was able to locate what appears to be another rocket by comparing an image published by the Syrian Civil Defense with satellite images. The image shows another crater potentially from another rocket.

Determining the location of a second rocket in Maram camp by comparing a picture published by the Civil Defense on 6 November 2022 and acquired by Syrian Archive on  with a satellite image taken on 1 October 2021.

Another alleged second rocket also caused damage to a location identified by comparing an image by Syrian Civil Defense to a satellite image (see center of the camp on the map).  The strike resulted in damage to the front façade (the eastern side to the south) of a tent in the camp.

Location of a second rocket’s impact site in Maram camp, identified by comparing a Syrian Civil Defense picture published on 6 November 2022 and acquired by Syrian Archive on 17 December 2022 with   satellite images provided by Google Earth.

One of the rockets landed on the corner of a tent, leaving a crater. Two videos, published by journalists Jamil Al-Hassan at 11:04 local time and Mohamed Belaas at 14:10 local time on Facebook on 6 November 2022, show the rocket’s penetration into the ground;  the upper part of the munition remained outside the hole on the road separating the tents. The crater (indicated in red in the picture below) is a distance of approximately one and a half meters from the tent, (indicated in orange).

The impact site where one of the munitions fell in Maram camp shown in a Jamil Al Hassan Facebook page posted on 6 November 2022 at 11:04 (video), and the location of the impact site on a satellite image from Google Earth and taken on 1 October 2021.

A video published by Euronews shows what appears to be a fourth rocket that fell behind a row of tents. The video shows that the munition penetrated a pile of dirt and rocks in Maram camp, and appears to have entered from the southeastern side.

Screenshots from the Euronews video showing where one of the rockets fell and penetrated a pile of dirt and rocks, and the location of the impact via satellite imagery from Google Earth taken on 1 October 2021. 

The video from local journalist Yaqeen Bidu shows a crater allegedly left by a munition rocket in front of one of the tents in the middle of the Maram camp.

Screenshot of a crater allegedly caused by a munition posted by the  Yaqeen Bidu Facebook page on 6 November 2022. Pictureposted by the Central District Administration page on 6 November 2022. Satellite imagery from Google Earth taken on 1 October 2021. 

A screenshot of a video posted by Yakeen Yasir Bido and annotated by Syrian Archive to show the potential direction of the projectile

The second location: an alleged training camp for Hayat Tahrir al-Sham and its immediate surroundings

Geolocation of impact sites

The day after the attack, Hamdy Arnous’ published on Twitter two videos taken from a reconnaissance plane, which he said documented the moment a camp and a workshop of drones belonging to Hayat Tahrir al-Sham were destroyed. Hayat Tahrir Al Sham is a Syrian Salafi-jihadist terrorist. The group is principally based in Idlib. The first video shows what appears to be the moment of the attack inside a grove of trees. Th second video shows more than forty people moving quickly in two rows.

Arranged screenshots from the first video, posted on 7 November 2022 and acquired by Syrian Archive on 16 December 2022, showing the period of time immediately before the attack, the attack itself, and the immediate aftermath of the attack.

Screenshot from the second video, posted on 6 November 2022 and acquired by Syrian Archive on 16 December 2022, showing what appears to be coordinated movement of people moving in two rows at the scene of the attack. Source: Hamdy Arnous Twitter account

The National Defense Men’s Facebook page and Al-Ikhbariya Al-Suriyya channel published a video of the same incident The commentary in the video stated: “ Syrian forces and the Russian Air Force targeted the command headquarters and training camps of Hayat Tahrir al-Sham in Idlib countryside.”

It was possible to geolocate the impact site through matching prominent features observed in reconnaissance aircraft’s images with satellite images, based on the geographical features and buildings in the target locations.

First, Syrian Archive identified four points shown in the National Defense Forces video of the impact site. The images below show similarities in the shapes of the four white spaces identified in the video. Additionally, the roads and the topography of the location match.

Above is an image from the National Defense Men’s video published to Facebook on 6 November 2022 and acquired by Syrian Archive on 6 Jan 2023  identifying alleged “terrorist” training camps. Below is a satellite image of an area nearby Kafr Jalis, with annotated red shapes representing the impact sites identified by Syrian Archive.

Additional verification involved determining the shapes of the impact sites and their surrounding topographies.

Screenshot from the National Defense Men video posted on Facebook on 7 November 2022. Annotated by Syrian Archive, the screenshot identifies landmarks that—when matched with the satellite imagery available on Google Earth Pro, taken on 1 October 2021—confirm the location of the alleged attack. 

One of the impact sites, according to a claim made in a video by Al-Ikhbariya Al-Suriyya, a Syrian state television channel, of  shows a cave used by Hayat Tahrir al-Sham allegedly for training.

Syrian Archive determined the location of this cave on satellite images, as well as the three entrances to the cave. The prominent features of these sites in the satellite images match those taken from the video of the reconnaissance plane that filmed the same incident.

Above is an image of the cave, which the Syrian News Agency claimed was a training site for Hayat Tahrir al-Sham. The red markings were originally included in the published material. The blue shape was added by Syrian Archive to demonstrate the matching topography of the site. Below is satellite imagery from Google Earth, taken on 1 October 2021 and acquired in December 2022 that shows the same topographical features in blue.

Above is an image from the  Syrian Public Authority of Radio and Television video of the three entrances to the cave. The squares in yellow and blue were added by Syrian Archive to specify the location. Below is a satellite image taken on 1 October 2021 and acquired in December 2022 from Google Earth annotated with yellow and blue squares to their corresponding locations in the video above.

The video from the reconnaissance plane shows the moment the location was hit, determined by Syrian Archive as follows:

Collage photo: Above, before and at the moment of strikes from a video posted by the Hamdy Arnous’ Twitter account and below is a satellite image taken on 1 October 2021 and acquired in December 2022  showing the impact site

Posted by the National Defense Men Facebook account after the attack, a video shows the alleged impact sites. The impact sites were all within a one square kilometer radius.

A satellite image taken on 1 October 2021 and acquired in December 2022 showing the general location of the multiple explosions shown in a video posted by National Defense Men Facebook account.

Two screenshots from the National Defense Men’s video showing what appears to be the moment rockets were allegedly launched (the text in the photos above are from the source).

Syrian Archive has identified eleven explosions in the impacted area that are consistent with what appeared in the National Defense Men video. The video was captured from a reconnaissance plane, as shown in the figure below:

The orange figures represent the sites in which characteristics of explosions allegedly from rocket strikes connected to this incident were observed. These sites were all identified from the National Defense Men video. 

About a kilometer south of the impacted area, a video by the National Defense Men of reconnaissance plane footage shows what appears to be another impacted site located on a main road.

The image above is a screenshot—annotated by Syrian Archive—of a second impact site, allegedly caused by air strikes and cluster rockets. Source:  National Defense Men’s video . Below is a satellite image from Google Earth, taken on 1 October 2021 and acquired on December 2022 annotated to show prominent landmarks observed in the National Defense Men’s video

Made up of a variety of clips, The National Defense Men video also shows an airstrike hitting a building near the main road and five successive rockets allegedly hitting the same location.

A picture of a second air strike, located approximately 1 km south of the first strike. The two top pictures are from the National Defense Men’s video (the red circle in the photo on the right is from  the source; the other yellow, orange, and red shapes were added by Syrian Archive ). The image below presents satellite imagery taken on 1 October 2021 and acquired in December 2022 from Google Earth - annotations added by Syrian Archive to demonstrate corresponding features.

After the airstrike, according to video footage, rockets were fired from a launcher to the same location. Syrian Archive identified ten explosions in the outskirts after the rockets hit the site.

The location of additional explosions shown in the National Defense Men video. The satellite imagery from Google Earth  was taken on 1 October 2021, acquired in December 2022, and annotated by Syrian Archive.

Both locations depicted in the video from the reconnaissance plane are between 2.1 and 3.2 km from Maram camp, which was allegedly hit in the same incident. The attack on Maram camp resulted in the killing of multiple people, including women and children, in addition to material damage to the camp.

Satellite imagery from Google Earth, taken on 1 October 2021 and acquired in December 2022, annotated by Syrian Archive showing the distance between the attacks shown in the National Defense Men video and Maram Camp.

Other impacted sites

In addition to the Maram camp and to what the Syrian Ministry of Defense claimed  to “target” a “training camp” and “command headquarters,” additional munitions also allegedly hit  camps (Watan - Wadi Khaled - Kafr Rouhin station - Morin village - Baeiba) within a radius of about 3.5 kilometers on the same day.

Nine impact sites identified by Syrian Archive as shown on satellite imagery from Google Earth taken on 1 October 2021 and acquired in December 2022. The training camp and command centers are claims made by the Syrian government.  The camps were identified in the National Defense Men video. 

A clip in a video posted by Facebook account Abu Wassim on 6 November 2022 at 10:46 local time shows the moment a rocket fell on Maram camp. in which fire is observed rising from the impact site. It is noted in the video that the attack took place during the  first moments of sunrise. Satellite images, below, show the location from ground level.

A collection of screenshots from a video posted by the account  as well as satellite imagery in ground level view from Google Earth taken on 1 October 2021 and acquired in December 2022 showing the location. Both the screenshots and satellite imagery were annotated by Syrian Archive. 

Reports on attack

According to the video of Halab Today,  the first bombing occurred at 06:50 on Sunday, November 06, 2022. A witness featured in the video report is a resident of Maram camp and  is one of the first responders to the bombing. The witness said that the attack effected the western and eastern sides of the Maram camp. The witness said the attack also affected the opposite side of the camp, which includes a gathering of caravans and tents.

The witness’ words match with the reports of aviation observatories on Telegram, which spoke of heavy shelling and a cluster bombardment west of Idlib and in the Maram camp in Kafr Jallis. Jisr al-Shughur Observatory published at (06:55-06:56), news about cluster “explosions” in the outskirts of Idlib. The Al-Ahrar Aviation Observatory alerted at 06:59 pm: cluster shelling at “the western outskirts of Idlib, beware of cluster bombardments.”

Screenshot of reports shared on Jisr al-Shughour Observatory Telegram channel

Screenshot of a report shared on Al-Ahrar Aviation Observatory Telegram channel posted at 06:59 local time

Idlib Aviation Observatory reported at 07:06 local time, “Civil Defence is needed at Maram camp”. The Idlib Aviation Observatory also reported news of “intense firing”, with what the channel reported were cluster rockets, hitting  areas west of the city of Idlib at (06:56-06:59).

Screenshot of reports shared by the Idlib Aviation Observatory on 6 November 2022 at around 07:00 - 11:00 from the Telegram channel.

Syrian North Observatory published, at 07:01-07:10 local time, news of unknown explosions shaking the city of Idlib. The channel also posted a photo—verified by Syrian Archive— allegedly showing the  bombing with cluster rockets hitting the outskirts of Maram camp, west of Idlib. The news also reported casualties as a result of the attack.

A report posted by the First Syrian North Observatory on Telegram on 6 November 2022 at 07:01.

A report posted by the First Syrian North Observatory on Telegram on 6 November 2022 at 07:10. 

The first video of the attack was published by the Idlib Aviation Observatory at 07:05 local time. In the video, the sounds of impacts are heard and smoke is observed distributed over more than one shell in one of the impacted sites.

A report from the Idlib Aviation Observatory posted on 6 November 2022 at 07:05. 

At 07:43 local time, the Idlib Aviation Observatory posted on Telegram news about Russian aircraft flying in a circular motion over Idlib the city. The channel reported of  successive firing at 08:01 and another firing at 08:06, and at 08:13 of two warplanes in the area.

Screenshots and report from the Idlib Aviation Observatory posted on 6 November 2022 at between 07:00 - 08:00.

The Al-Ahrar Aviation Observatory reported that three warplanes took off  as well as the presence of reconnaissance planes circling over western  Idlib at 07:11.

The first report on Twitter concerning this attack was at 07:06 local time, a video published by the Shahid Plus account. The video’s caption reported cluster rockets targeting an area west of Idlib. This was followed by a video from Idris Al-Khatib’s account that appears to document a rocket launcher firing projectiles at 07:37 local time.

Screenshot from a video posted by Twitter user Idris Khatib at 07:41 showing the launching of projectiles.

Further reports of the incident posted on Telegram between 7:00 and 9:00 Damascus local time on 6 November 2022 include those by  Abu Murshid al-Janoubi, Hayyan Abu Rashid, Observatory Abu Amin, Civil Defense, Ahmed Abu Hamza, and Hadi Kharat. These reports were attached to photo and videos regarding the attack on Maram camp in Kafr Jallis.

Screenshot from Hadi Kharrat video posted on 6 November 2022 at 08:47  and acquired by Syrian Archive at 16 December 2022 at 19:02 showing smoke emanating from what appears to be five impact sites in the outskirts of Kafr Jallis.

Screenshot from Hadi Kharrat video posted on 6 November 2022 at 08:47  and acquired by Syrian Archive on 16 December  2022 showing what appears to be the aftermath of strikes hitting the outskirts of Kafr Jallis.

Screenshot from Hadi Kharrat video  posted on 6 November 2022 at 08:47  and acquired by Syrian Archive on 16 December 2022 showing what appears to be the aftermath of strikes hitting the outskirts of Kafr Jallis.

Screenshot from Hadi Kharrat video posted on 6 November 2022 at 08:47  and acquired by Syrian Archive on 16 December 2022 showing what appears to be the aftermath of strikes hitting the outskirts of Kafr Jallis

Additional reports of the incident, in which various camps were hit with strikes, appeared on Facebook. This includes reports by Syrian Civil Defense, journalist Jamil Al-Hassan, journalist Mohamed Belaas, Qasioun Agency, Orient News Network,  Al Jazeera Live,  Al Jazeera Syria, Syria TV, Al-Hadath News Agency,  Thiqa Agency, Al Arabiya, Yaqeen Bidu, and others who shared pictures and videos showing the aftermath of strikes on the camps. Sources additionally shared reports about first response moments and reports of attempts made to those killed and injured, names of those killed and injured as a result of the attack, as well as the moments of the strikes.

A video by Orient News Network  included testimonies of witnesses who spoke about the attackThose interviewed described a state of panic during the attack as well as women and children screaming, likening it to “the Day of Resurrection.” Witnesses spoke about the first responders treating those injured in the attack. The video showed what appears to be shrapnel in one of the tents. Another person interviewed as part of the Orient News Network video stated: “How will you protect the residents in a tent with a thickness of 2 cm? The missile landed while we were sleeping. I carried my children to the bathroom to hide them there. For a few moments, then the missile landed in our neighbor’s tent.”

Screenshot from Orient TV video posted on 6 November 2022 and acquired by Syrian Archive on 06 Jan 2023 showing one of those affected by the bombing in his tent pierced by munitions shrapnel.

Omar Haj Kaddour posted pictures of children injured in the bombing of Maram camp receiving treatment at the Syrian American Medical Society (SAMS) Hospital. He  posted at 07:03 news about the bombing of the outskirts of Idlib with cluster rockets.

Another  video report, by Akhbar Al Aan and published on Twitter, included testimonies of residents of the camp about what happened in which those interviewed described the camp being bombed and tents being burned as well as video documentation of families being displaced. One of the women interviewed at minute 1:42 stated:, “We can no longer bear it. We fled from death to death. I don’t know where to go, but I will not stay here.”

In addition to the meeting with Moatasem Addad, the director of the camp, Al Aan emphasized that the camp was established in an area far from hostilities or any military presence for more than a year and a half. Addad also spoke about the timing of the attack, claiming that it took place at roughly 6:00 Damascus local time. He also spoke about the population of Maram camp hosts 702 families comprising of about 4,000 people, the majority of whom were  displaced from the southern countryside of Idlib as a result of the recent Syrian Government campaign in Idlib.

In a statement issued by the Syrian Ministry of Defense regarding the incident, the Ministry stated: “the missile artillery of the valiant armed forces and the Russian Aerospace Forces targeted command headquarters and training camps of terrorist organizations, where the targets were monitored and monitored with high precision, then the missile artillery forces of the Syrian Arab Army launched strikes “focused on those targets with missile barrages and airstrikes.”

Channels more closely aligned with the Syrian government also reported on the attack, claiming that the attack was against “terrorists and their training camps.” This includes statements by  Syria Al-Watan News, Daraa Net, Sada Syria News, Al Mayadeen, Alwasat-Midline-News, Mustafa Al-Wriaghli, Al-Mehwar News,  Naglaa El Saadawi, and Al-Ikhbariya Al-Suriyya.

Screenshot of a  Tweet by  Sada of Syria News posted on 6 November 2022 and acquired by Syrian Archive on 16 December 2022.

Screenshot from a  tweet by Al Mayadeen  posted on 6 November 2022 and acquired by Syrian Archive on 16 December 2022.

Screenshot from a tweet by Alwasat-Midline-news posted on 6 November 2022 and acquired by Syrian Archive on 16 December 2022.

Screenshot from a tweet by Najlaa El Saadawi posted on 6 November 2022 and acquired by Syrian Archive on 16 December 2022. 

Another video, published by Orient News Network, at 09:42 local time on the day of the incident, shows the sun rising over the impact site.

Screenshot from an Orient News Network channel video— posted on 6 November 2022 and acquired by Syrian Archive on 16 December 2022— showing the moment of sunrise, some time after the incident

User Abu Lail Shayeb shared a video via Facebook at 11:18 local time on the morning of the attack, in which the sounds of what appears to be explosions can be heard. The moment when munitions impact the site and the resulting  explosion in two tents can also be observed. No shadows appear in the video, which indicates that the projectiles fell in the area early after sunrise set at around 6:00 Damascus local time on the day of the attack.

Screenshot from video posted by user Abu Lail Shayeb on 06 November 2022 and acquired by Syrian Archive at 06 January 2023.

Another video published by Baladi News shows one of the tents on fire as a result of the attack.

Screenshot from Baladi Media Network’s video—posted on 06 November 2022 and acquired by Syrian Archive at 06 January 2023—of one of the tents burning after the strikes.

Timing

Comparing available footage, including that by Orient News Network, that was filmed immediately after the attack to analysis possible using the SunCalc tool allows for possible corroboration of claims made in video and other open source media reports. The sun’s position in the video corresponds to its height in the sky at approximately 07:00 Damascus local time, which corroborates claims made by  witnesses about the timing of the incident. It is of note that the sunrise at the impact site is at 06:00 Damascus local time according to SunCalc.

Screenshot from an Orient News Network video— posted on 6 November 2022 and acquired by Syrian Archive on 16 December 2022— showing the moment of sunrise, some time after the incident.

A video posted by Orient News Network— posted on 6 November 2022 and acquired by Syrian Archive on 16 December 2022— as well as two pictures posted by the Syrian Civil Defence, posted on 6 November 2022 and acquired by Syrian Archive on 17 December 2022.

Satellite imagery from Google Earth taken on 1 October 2021 and annotated by Syrian Archive showing a geolocation of the set of pictures above.

A screenshot of the location of the sun and shadows in Maram camp, around 07:00 Damascus time, on November 6, 2022, using the SunCalc tool.

Analysis of online reports about the incident and the time of its occurrence and the testimonies of witnesses in the available open source documentation indicate that the attack on Maram camp and the surrounding areas occurred between 06:50 and 07:15 local time on the day 6 November 2022.

Potential munitions and delivery methods used

To determine potential munitions and delivery used in the attack, the following forms of analysis were conducted::

• Analysis of pictures and videos indicating a large geographic scope of the sites impacted 
• Analysis of pictures and videos documenting remnants of munitions allegedly used in the attack
• Comparing documentation of alleged remnants to that of pictures of munitions and weapons systems from their manufacturer or another official source and/or from documentation of munitions or weapons systems used in other conflict regions in which their use has been confirmed.

Four videos posted by Hadi Kharrat on Twitter of the impacted camps and their surroundings on 6 November 2022. Video documentation indicates that  the attack was distributed over a wide area and in areas in close proximity to each other - at one impact site, more than ten explosions occurred within a time interval of no more than thirty seconds.

In the videos are the sounds of explosions in the area and with flashes of light after each explosion.

Screenshot from video posted by Hadi Kharrat on 6 November 2022 and acquired by Syrian Archive on 16 December 2022  showing smoke emanating from five places in the surroundings of Kafr Jallis.

Screenshot from Hadi Kharrat’s video—posted on 6 November 2022 and acquired by Syrian Archive on 16 December 2022—of the affected impact sites on the outskirts of Kafr Jallis.

Screenshot from a video posted by Hadi Kharrat on 6 November 2022 and acquired by Syrian Archive on 16 December 2022  of the affected impact sites on the outskirts of Kafr Jallis.

Screenshots from Hadi Kharrat’s video— posted on 6 November 2022 and acquired by Syrian Archive on 16 December 2022— of the affected impact sites on the outskirts of Kafr Jallis. Annotated by Syrian Archive, the red circles denote smoke plumes shown in the videos mentioned above.

In response to the attacks on IDP camps, the Syrian Civil Defence published a statement noting the increased attacks on displaced people near the villages west of Idlib city, specifically Kafr Jallis, Morin, and the Wadi Haj Khaled area. The Syrian Civil Defence claims in their statement that “surface-to-surface missiles (220mm 9M27-K Uragan) loaded with internationally banned cluster bombs Type (9N210 and 9N235),” were used in the attack.

Available open source documentation documenting the aftermath of the attack includes documentation of munition remnants allegedly used in the attack.

1 - Documentation of munition remnants in Maram camp

A picture of the remnants of a munition that fell in Maram camp posted by the Syrian Civil Defence on 6 November 2022 and acquired by Syrian Archive at 17 December 2022.

A picture of the remnants of a rocket in Maram camp in Kafr Jallis posted by the Syrian Civil Defence on 6 November 2022 and acquired by Syrian Archive at 17 December 2022.

A screenshot of remnants of a rocket that fell in Maram camp from a video posted by Jamil Al-Hassan on Facebook on 6 November 2022 and acquired by Syrian Archive on 17 December 2022.

Two screenshots  of the location and remnants of a rocket that fell in Maram camp from a video posted by the Syrian Press Center on Facebook on 6 November 2022 and acquired by Syrian Archive on 17 December 2022.

Screenshot  of the remnants of a rocket that fell in Maram camp posted by Orient News Network on Facebook on 6 November 2022 and acquired by Syrian Archive on 17 December 2022.

Two screenshots of the remnants of a rocket that fell in Maram camp from a video posted by Al Jazeera on Facebook on 6 November 2022 and acquired by Syrian Archive on 17 December 2022.

Screenshot of one of the rockets near Maram camp from a video posted by Radio Al-Kul on 6 November 2022.

Screenshot from Ahmed Abu Abdo’s Facebook video—posted on on 6 November 2022 and acquired by Syrian Archive on 17 December 2022—of one of the munitions allegedly used in the attack

A picture posted by QalaatM Twitter account—posted on 6 November 2022 and acquired by Syrian Archive on 17 December 2022—of munition  remnants allegedly used in the attack impacting Maram camp. Source: QalaatM account on Twitter.

Screenshot of remnants of munitions allegedly used in the attack impacting Maram camp, posted by Euro News on 6 November 2022 and acquired by Syrian Archive on 17 December 2022.

2 - documentation of munition remnants in other impact sites that were attacked on the same day

Screenshot from Bashar Abu Malik’s video—posted on  on 6 November 2022 and acquired by Syrian Archive on 17 December 2022— including documentation of the remnants of munitions allegedly used in the incident.

A picture posted by QalaatM on Twitter—posted on 6 November 2022 and acquired by Syrian Archive on 17 December 2022— of munition  remnants allegedly used in the attack impacting Maram camp.

Screenshot from Fouad Al-Rimi’s Facebook video—posted on 6 November 2022 and acquired by Syrian Archive on 17 December 2022— showing remnants of a munition allegedly used in the attack.

Pictures of munition remnants allegedly used in the attack  found in the vicinity of the impacted sites, posted by the Syrian Civil Defence on Telegram on 7 November 2022.

Screenshot from Baladi Media Network video on YouTube—posted on 6 November 2022 and acquired by Syrian Archive on 17 December 2022— showing remnants of munitions allegedly used in the attack.

A picture by Thiqa Agency—posted on  on 6 November 2022 and acquired by Syrian Archive on 17 December 2022—  of one of the munitions allegedly used in the attack that affected the camps.

A picture by Thiqa Agency—posted on 6 November 2022 and acquired by Syrian Archive on 17 December 2022— of one of the missiles that impacted the camps. 

A picture by Thiqa Agency—posted on 6 November 2022 and acquired by Syrian Archive on 17 December 2022—of one of the missiles that impacted the camps. Source: Thiqa Agency.

Two photos from the Facebook page Kay la Nansaa—posted on 6 November 2022 and acquired by Syrian Archive on 17 December 2022—munition remnants of munitions allegedly used in the attack on Wadi Khaled camp

A comparison of photos of munitions remnants allegedly used in the attack were compared to those found elsewhere. From this analysis, it was determined that 300mm 9MM55K rockets were potentially used.

A photo posted by Twitter user EOD205 of a 300mm 9m55k rocket, posted on 3 March 2022.

Above is a picture from the Ares website of the remnants of a 300mm 9M55k rocket, below is a picture—posted by Kay La Nansaa Facebook page on 6 November 2022 and acquired by Syrian Archive on 17 December 2022.

Above is a picture from the Journal of Conventional Weapons Destruction available on the JMU Scholarly Commons and Issuu.com. Below is a picture of a rocket in one of the impact sites, posted by Twitter user QalaatM on 6 November 2022 and acquired by Syrian Archive on 16 December 2022. 

In a comment accompanying the videos from two reconnaissance aircraft published by the Russian RVvoenkory Telegram channel, a user identified the type of rocket used as the MLRS Uragan Smerch.  As a launch system for 300mm 9m55k rockets, this claim matches what analysis completed concluded regarding the use of rockets 300mm 9M55k in the incident.

Screenshot from video in Ukraine of the 9m55k projectiles.

Information on these identified munition types: 

• Surface-to-surface rockets type (220mm 9M27-K)

Characteristics of the 220mm 9M27-K rocket. Source: ARES.

The image on the top right is from Radio Al-Kul video, on the top left is from Baladi Network video posted on 6 November 2022 and acquired by Syrian Archive on 17 December 2022, on the bottom is a picture  from the ARES website, all of which are remnants of a 220mm 9M27-K rocket.

• 9N235 cluster bombs

The top right is a picture of cluster bomb from ARES website, the top left picture is from Azer News website, below is a picture from the Syrian Civil Defense channel on Telegram—posted on 7 November 2022.

Hours after the strikes took place, Halab Today channel published a video of the Syrian Civil Defense removing what they claimed were cluster munitions from Maram camp. A photo the Civil Defense shared on Telegram that was attached to a news story about the unexploded ordnance teams, which are “continuing their work to locate and destroy unexploded cluster bombs, after the bombing of the regime forces and Russia yesterday, Sunday, November 6, with surface-to-surface rockets loaded with cluster bombs.”

Videos posted by the RVvoenkory channel on Telegram and later reported by the Syrian Public Authority for Radio and Television mention the participation of the Russian Air Force in the attacks on the area. Both reports claim the type of aircraft invovled was a SU-24m. Syrian Archive was unable to identify any type of air-to-surface munition used in the attack on Maram camp in Kafr Jallis. 

Flight Observation Data

To further verify the incident, Syrian Archive cross-referenced information from open sources with flight observation data from a spotter organisation, which documents sightings of warplanes by partner observers in cities throughout Syria. These observers collect data about the aircrafts such as the type of plane and the direction the plane is flying. Although there may be misidentifications of aircraft in the flight data, additional information such as witness statements and social media posts can corroborate the identified aircraft and its course. Syrian Archive analysed flight observation data from 6 November 2022 between 06:00 - 08:00. 

Flight observation data shows several Russian fixed wing aircraft taking off from Hmemim Airbase (around 88 km southwest of Kafr Jalis) between 06:10 - 06:40. Several Russian aircraft—flown by Russian or Syrian personnel— were also spotted circling over Idlib city (around 5 km southeast of Kafr Jalis) between 06:39 and 07:13. The commonly observable practice of circling by warzone aircraft generally indicates target acquisition and/or preparation for an imminent strike. Drones were also spotted flying west over Idlib city between 6:03 - 08:11. 

Russian aircraft were also spotted flying over villages surrounding the attack site. Russian aircraft were spotted flying southeast over Foah at 06:41 (around 8 km east of Kafr Jalis). Russian aircraft were also spotted flying east and southwest over Maaret Misrin (around 6 km east of Kafr Jalis) between 06:40 - 07:14. Similarly, Russian aircraft were spotted flying southwest and northeast over Hafsarjah (around 9 km west of Kafr Jalis) between 06:53 - 07:13 and flying south over Binnish (around 9 km east of Kafr Jalis) at 07:15. 

There is no information available positively confirming that one or more of the observed aircraft was directly involved in the strike detailed above. Nevertheless, the reported presence of Russian aircraft above the towns and surroundings increases the likelihood that airstrikes occurred in the area at the estimated time.

Likely responsible

The commentary accompanying the two video clips of the reconnaissance aircraft published by the Russian channel RVvoenkory on Telegram, stated that the Russian forces were responsible for the incident. In the video, it was claimed that this attack came as a response to a drone attack by what was claimed to be”terrorists” on Syrian army sites, where ten soldiers were killed.

The video identified the type of aircraft as Su-24m, and the munitions used as from MLRS Uragan Smerch system, which corresponds to remnants of rockets found in the area of ​​impact in available open source documentation. The footage in the reconnaissance aircraft video also features corresponding prominent landmarks.

On its Facebook page, the Syrian Ministry of Defense published a statement attached to a video. It claimed the joint attack by Syrian forces and the Russian Air Force targeted the command headquarters and training camps belonging to “terrorist organizations,”, and quoted the names of some of those killed in the incident. It is not possible to independently verify these claims.

Accounts and websites publishing content supportive of the Syrian government published news articles with photos and videos of the incident in which they claimed Syrian and Russian forces were responsible for the attack. These accounts include reports by Syria Al-Watan News, Daraa Net,  Sada Syria News, Al-Mayadeen,  Mustafa Al-Wariagli, Al-Mehwar News, Najlaa El Saadawi, Al-Ahfad, Hamdy Arnous on Twitter, and Rijal al-Waad on Facebook.

Screenshot from Syria Al-Watan News tweet—posted on 6 November 2022 and acquired by Syrian Archive on 16 December 2022— about the incident.

Screenshot from Al-Mehwar News tweet —posted on 6 November 2022 and acquired by Syrian Archive on 16 December 2022— about the incident.

Screenshot from Ahfad’s tweet—posted on 6 November 2022 and acquired by Syrian Archive on 16 December 2022—about the incident.

Screenshot from Hamdy Arnous’ tweet—posted on 7 November 2022 and acquired by Syrian Archive on 16 December 2022—about the incident.

Bagration’s page quoted the Russian Reconciliation Center, a Russian government program established in 2016, as saying that a ” Syrian missiles and air force” destroyed an alleged “militant training camp” as well as a workshop in which  drones were assembled.

As previously mentioned, a video posted by the National Defense Men show what appears to be two rocket launchers.

Reports about the location of the rocket launch, as accounts such as, Hussein Abu Ali on Facebook, Al Jazeera Syrian, Halab today channel,  Al-Moharrer Media Network on Telegram, claimed that al-Nairab military airport in Aleppo is where the rocket was fired from.

Screenshot From Al-Jazeera Syria on Telegram.

Screenshot from Halab Today channel on Telegram, posted on 6 November 2022 and acquired by Syrian Archive on 17 December 2022.

Screenshot from Al-Moharrer Media Network’s Telegram channel, posted on 6 November 2022 and acquired by Syrian Archive on 17 December 2022. 

At the same time the accounts Laith Ahmed, Jablet Al-Adhamiya, Salwa Abdel Rahman، Syrian Reporter، Idlib Officially identified the source of the shelling is from the city of Saraqib, east of Idlib.

Screenshot from the Syrian Correspondent Facebook page posted on 6 November 2022 and acquired by Syrian Archive on 06 January 2023.

Screenshot from journalist Salwa Abdel Rahman’s Facebook page posted on 6 November 2022 and acquired by Syrian Archive on 06 January 2023.

*Screenshot from Laith Ahmed’s Facebook page posted on 6 November 2022 and acquired by Syrian Archive on 06 January 2023.

Syrian Archive analysed who was likely responsible for the incident according to the feasible range of the rockets used and comparing this range with the military areas of control in the surrounding areas, as follows:

The feasible range of 220mm 9M27-K surface-to-surface rockets ranges between 10 to 35 km, while the range of 300mm 9M55K rockets ranges from 20 to 90 km.

A map of Military distribution in northern Syria from the Jusoor Center.

Satellite imagery from Google Earth annotated to show the range radius.

The range of the munitions used in the incident and the areas of control shown in the Jusoor Center 2020 map suggests that Syrian and Russian government forces were likely responsible for the attack. The direction of the rockets’ launch—identified previously through the position of craters at the incident site—suggests that rockets may have been launched from the southeast including the areas of Saraqib and Khan Al Sabil, where are located northeast and southeast of the camp.

Al-Nairab Military Airport in Aleppo is about 60 km to the northeast of the impact site in Maram camp, while Saraqib is about 22 km to the southeast.

Screenshot of the distance between Al-Neirab Military Airport and Maram Camp as shown on satellite imagery from Google Earth.

The distance between Al-Neirab Military Airport and Maram Camp as shown on satellite imagery from Google Earth.

Impact on civilians

Victims

The Syrian Civil Defense published to its Telegram channel figures of the number of those killed and injured as a result of the attack on 6 November 2022, finding that 10 people were killed, including four children and one woman, and 75 others were injured.

A video clip of the Syrian Civil Defense showed the first response moments and the transfer of the injured in ambulances. Another video showed the volunteer in the Civil Defense, Hassan Bakir, bidding farewell to his child, who was killed in the strikes inside the camp.

Screenshot from a video posted by the Syrian Civil Defence—posted on 6 November 2022—showing volunteer Hassan Bakir bidding farewell to his child who was killed in the bombing.

In a statement issued on Facebook and in a statement, the Watan Foundation spoke about the attack, which led to complete damage to 41 tents. Additionally the statement claimed that more than 100 tents were partially damaged, 10 people were killed and more than 70 others were injured.

Syrian Archive came across reports of victims and injured people and their arrival to hospitals, in each of the accounts Civil Defense on facebook and Twitter,  Abu Waseem, Mustafa Al-Qasim Abu Ahmed, Yahya Mohammed, Al Arabiya, Bashar Abu Malik, ‘Afeal Khaladaha Altaarikh fi Altamaniea page, journalist Omar Haj Kaddour، Al-Mu’tasim Billah Shahoud, Saud Sayah، Aljazeera live،  The people of Al-Bab city gathering، Airwars website, and Watan camp page.

Video reports of journalist Jamil Al-Hassan, journalist Muhammad Belaas, Khabar Here Syria, video of Nidaa Post, journalist Yaqeen Bidu about the nature of the fatalities. 

Bidu provided a few examples of those killed in the attack. He spoke about a pregnant woman and a woman who worked as a seamstress,,the childof a Syrian Civil Defense volunteer, a man, and a young Syrian man who had previously been deported from Turkey two months earlier.

Other reports identify the names of victims, including two girls and a woman from Khan al-Sabil, a man and a young girl from the village of Iblin, a young man from the village of Haysh, and a young girl from the village of al-Taman’a. The last fatality reported as a result of the attack was a woman from Khan al-Sabil, who died on November 15, 2022, as a result of her injuries.

Damage

The incident resulted in damage to a large area of tents,the burning of some of these, as well as destruction of household furniture and personal belongings.Videos and images were published by Thiqa Agency, Al-Hadath News Agency, Al Jazeera, local journalist Hadi Al-Abdullah، Central District Administration، General Media Center, and dozens of different websites and news pages.

Jamil Al-Ahmad, a coordinator at the Maram Foundation, estimated in a video report on Syria TV, the number of damaged tents is more than 100 tents that need to be replaced.

Response Coordinators in Syria counted the number of damaged caravans and tents is 63, they are mostly in Maram camp. In addition to material damage to more than 3,621 families in the targeted camps. Additionally, the bombing caused the displacement of  2,183 people.

Pictures of the damage in Maram camp posted by Radio Fresh on Twitter on 6 November 2022 and acquired by Syrian Archive on 16 December 2022.

Pictures of the damage in Maram camp posted by the Central Region Administration Facebook page on 6 November 2022 and acquired by Syrian Archive on 16 December 2022

Traces of what appears to be blood in one of the damaged tents posted by the Syrian Civil Defence on 6 November 2022 and acquired by Syrian Archive on 17 December 2022.

Picture showing the tearing of one of the tent awnings in Maram camp, and holes in the back awning posted by the Syrian Civil Defence on 6 November 2022.

Two screenshots from Al-Jazeera’s Facebook video—posted on 6 November 2022 and acquired by Syrian Archive on 17 December 2022—showing one of the burning tents in Maram camp after the incident.

Pictures of damaged tents as a result of the incident  in Maram camp posted by the Syrian Civil Defence on 6 November 2022 and acquired by the Syrian Archive on 17 December 2022. 

Displacement

The impacted site represented a habitat for thousands of displaced families from the southern countryside of Idlib and the countryside of Hama. According to Humanitarian Response, the area includes more than 23 camps within a radius of 7 kilometers, which includes unofficial camps and camps built by United Nations agencies.

The same team claims the attack resulted in the displacement of  2,183 families from the targeted camps and their surroundings, as well as material damage to more than 3,621 families and 63 tents and caravans, the majority in Maram camp. Additionally, 46 camps and shelters were subject to attacks from the beginning of 2022 until the beginning of November 2022. 

The accounts of  Al-Akhbar Al-Aan on Twitter, and Syrian Net, Watan camp, Al-Sharq News, Syria Response Coordinators, Radio Al-Kul provide testimonies, photos and videos regarding the displacement of people from the camp after it was attacked.

Screenshot from a video interview—posted by Akhbar Now on  6 November 2022 and acquired by Syrian Archive on 16 December 2022— with a woman fleeing Maram camp after it was attacked.

A p**icture of a car carrying the furniture of a displaced family from Maram camp, posted by Al-Souria Net on Twitter on 6 November 2022 and acquired by Syrian Archive on 16 December 2022 . 

Local and international reactions

A joint statement issued by issued by Muhannad Hadi, Regional Humanitarian Coordinator for the Syria Crisis, Ayman Gharaibeh, Director of the Middle East and North Africa Office of the United Nations High Commissioner for Refugees (UNHCR), and Sudipto Mukerji condemned the attack and  expressed concern about the escalation of hostilities in Idlib, without referring to the perpetrator.

The United Nations joint statement on the attack.

Euro-Mediterranean Observatory held the Syrian government responsible for the bombing, and said that it was part of a larger pattern , having documented more than six camps in areas west of Idlib attacked by the Syrian and Russian forces.

Anas Al-Jarjawi, Director of Operations at the Euro-Mediterranean Observatory, said that the bombing was deliberate, and that the use of cluster munitions indicates a clear intention to increase the damage to the bombed area. Al-Jarjaw stated: “the areas to which the displaced fled in the belief that they are safer are the same ones in which they were killed. There is no greater reason than that for the countries that started deporting Syrian refugees to realize that Syria is still an unsafe place to live and settle down.”

The French Foreign Ministry condemned the bombings in a Twitter statement, and held the Syrian government, with the support of Russia as responsible for the attack.

A tweet by the French Foreign Ministry about the incident.

The official account of the US Embassy to Syria condemned the bombing in Twitter statement and held the Syrian government and Russia are responsible for the attack on the IDP camps.

A tweet from the official Twitter account of the US Embassy in Syria about the incident.

The Turkish Foreign Ministry also condemned the attack on the IDP camps in a press statement published to its website, without specifying the party responsible for the attacks.

A statement from the Turkish Ministry of Foreign Affairs website about the incident.

Response coordinators in Syria, said that the camps that were impacted were supported by the United Nations, and held the Syrian and Russian forces responsible for the attack. In a statement published on Telegram, the Syria Interim Government(SIG) — is an alternative government in Syria, formed by the umbrella opposition group, the National Coalition for Syrian Revolutionary and Opposition Forces — also held the Syrian forces and their allies responsible for the attack describing it as “deliberate.”

A copy of the Syrian Interim Government’s statement about the incident.

Conclusion

Analysis of a variety of open source documentation shows that Maram Camp and a variety of other neighboring camps in the  Kafr Jallis area of  Idlib countryside—as well as three locations claimed to by command centers and training camps by the Syrian Ministry of Defense— were damaged as a result of what appears to be ground-to-ground strikes on November 6, 2022, between the hours 06:50 and 07:15 a.m. local time

The attack resulted in the killing of  10 people, including four children and two women, and injury of about 75 others. More than one hundred tents and caravans were additionally partially damaged or completely destroyed, leaving thousands of already displaced people yet again displaced from the camps. 

All available open source documentation, including official statements by the Syrian Ministry of Defense, by official Russian channels, and in video clips filmed by a Russian reconnaissance plane, point toSyrian and Russian Air forces responsible for the incident.