A system is provided for detecting abnormal consumption in a distributed water infrastructure. The system may comprise at least one processor. The system may receive from at least one sensor associated with the distributed water infrastructure indications of regular water usage, wherein the distributed water infrastructure includes a plurality of water appliances. The system may determine from the indications received over a time period, at least one recurring time period of expected diminished water usage. The system may determine for the at least one recurring time period of expected diminished water usage at least one expected diminished water usage profile. The system may receive from the at least one sensor during a current time period of expected diminished water usage, real time indications of water usage, which may constitute a current water usage profile. The system may compare the current water usage profile during the expected period of diminished water usage with the at least one expected diminished water usage profile. The system may, based on the comparison, determine that water usage in the current water usage profile materially exceeds water usage in the at least one expected water usage profile. The system may execute a remedial action when, based on the comparison, the current water usage profile materially exceeds the at least one expected water usage profile.