Devices are quite hard to track. Delete cookies, maybe create a new browser profile or use another browser and you're another "device" in their eyes. IP addresses are imperfect as well, because often many people share one IP (families, companies, universities...). And behavior patterns are always a bit fuzzy.