How to block any authentication requests to my Exchange Online org by IP or IP block.

Question

Looking over authentication requests in Azure access logs I see constant attempts from certain countries. Many of these attemps are from similar IPs. In 2023, where in the EAC can i find the section where I can input the IP/subnet or IP block so block attempts from a specific ip? 90% of the online documentation is outdated -- this site; https://learn.microsoft.com/en-us/microsoft-365/security/office-365-security/connection-filter-policies-configure?view=o365-worldwide only specifies how to do this in powershell +

Set-HostedConnectionFilterPolicy -Identity Default -IPAllowList 192.168.1.10,192.168.1.23 -IPBlockList 10.10.10.0/25,172.17.17.0/24

I am afraid if I did the above it would disallow my current Ip and I'll be locked out. Is there any other way of doing this without fooling around with Powershell and accidently locking myself out?

Answer 1

You can use the GUI: https://security.microsoft.com/antispam https://learn.microsoft.com/en-us/microsoft-365/security/office-365-security/connection-filter-policies-configure?view=o365-worldwide#use-the-microsoft-365-defender-portal-to-modify-the-default-connection-filter-policy