Have been receive numerous emails to my backup email address (gmail, different username) requesting a password reset to my hotmail. Checking the security logs, I do see a number of attempts at automatic syncing (IMAP protocol) from various locations around
the world). All these attempts were unsuccessful. However, those have now been followed up by these new attempts to reset the password. Whoever it is, they are persistent since I've been getting multiple requests almost daily.
Sign-in for the hotmail account is already using 2FA, so there's not much more I can do to make my account any more secure. For the moment, I'm filtering all emails regarding password resets to the trash bin since the constant emails are bloody annoying.
I do think it might be better to have an alphanumeric reset code rather than a purely numeric one.