Weird Login Alerts on My Email — Should I Be Worried?

Lately, I've been getting login alerts from my email provider saying there was a sign-in from a new device or location. Thing is, I haven’t logged in from anywhere unusual. I’ve changed my password a couple of times just to be safe, enabled two-factor authentication, and scanned my computer for malware, but the alerts keep coming.

What’s odd is that the alerts mention locations that seem kinda random—sometimes a city across the country, sometimes even abroad. I’m wondering if it’s some kind of spoofing or if someone really is trying to get into my account without success. I’m also worried that maybe there’s some app or service I authorized a long time ago that’s causing these notifications.

Has anyone else experienced something like this? How do you figure out if it’s a genuine hack attempt or just false alarms? And if it’s the former, what’s the best way to make sure my account is truly secure beyond the basics?