bogus email

You did the correct thing when you reset your password. Do you by any chance have Two Factor Authentication enabled on your account? Two Factor sends a verification code when you sign into your account. If you haven't enabled Two Factor, you may want to consider doing so. It provides the most security for your Apple ID account. To enable Two Factor, go to settings>name>password and security>turn on Two Factor.

https://support.apple.com/en-us/HT204915

Below is an article on phishing attempts. You can forward the email you received to reportphishing@apple.com. The security team will investigate.

https://support.apple.com/en-us/HT204759

If the attempts continue, you might want to consider a name change.

Note the restrictions in the article.

Apple ID Name Change

 What to do after you change your Apple ID or password - Apple Support     I suggest doing this before you change your Apple ID or password.

Report This to Apple: Forward this phishing scam the Apple. Use this eMail Address: reportphishing@apple.com

Doing Your Part: The more reports Apple receives of such phishing eMails and scams, the more Apple's engineers will know what to look out for, and what to add to its security updates.