A Microsoft app for iOS and Android devices that enables authentication with two-factor verification, phone sign-in, and code generation
You won't be blocking IP Addresses. This is different but effective.
Keeping hackers out of Microsoft accounts
https://www.outlook-tips.net/tips/keeping-hackers-microsoft-accounts/
To repeat a warning that's in that article...
Do not delete the original address. It becomes a non-primary alias that cannot be used for sighing in.
Don