Yes, as I was saying, the IPs are only from today's date (unfortunately, there is no time, just the date) and today I was just using Evernote pretty heavily - I went basically through all of my notes, edited some and also exported all of them. I also have lot of web pages saved using Evernote web clipper, so there may be some external links, that could somehow trigger this behaviour.
Regarding password complexity, it's really complex and unique, stored by Google password manager and not used on any other site. (+ 2FA, of course)