There is a relatively easy way to prevent further login tries to the known E-Mail Account:
Log into your Microsoft account > Anmeldung bei Microsoft verwalten and set up a new E-Mail alias.
After that, make that alias your Primary one.
When done, navigate to > Anmeldeeinstellungen and check out the E-Mail Adress which is tried to be hacked and youre done.
You still have that e-Mail Adress, but it can't be used to login anymore, hence no more tries and no way to remotely got a disabled account, you get a "Account doesn't exist" back when trying to login at any Microsoft Service.