Another way to avoid these hack attempts is not use Office 365/Microsoft 365. O365 is a high-value honeypot.