I block most of it anyway, with a couple of individual exceptions, but other than those examples mentioned above, there's also:
- dc.services.visualstudio.com (40.114.241.141, 52.169.64.244)
- vortex.data.microsoft.com (40.77.226.250, 65.55.44.109, 51.141.13.164, 51.140.40.236)
- bingsettingssearch.trafficmanager.net (13.95.93.152)
I actually have no clue what the last one there is (Bing)—I must have known at some point, but have long forgotten.
Notable exceptions allowed: marketplace.visualstudio.com (13.107.6.175, 191.238.172.191, 13.85.19.92)