Monitoring a premises may comprise receiving signals from a plurality of devices. One or more spatially static devices of the plurality of devices may be determined based on strengths of the received signals. A user activity pattern may be determined based on changes in strengths of signals received from the spatially static devices. Abnormal user activity may be determined based on the user activity pattern and a strength of at least one signal received from at least one of the spatially static devices.