Multiple successful login attemps from foreign device despite resetting password and 2fa being on

Question

Recent sign-in activity in microsoft account shows that multiple attemps have been made to log into my account some of which were successful, after changing my password and completely reinstalling the 2fa someone tried to reset my password again. On the second breach try, "passed security challenge for password reset step 1 of 2" was written in the recent activity tab, I made an alias email to prevent further attempts but I'm not sure how they bypassed my 2fa.

Note: I use google authenticator if that's of any help.