I got this email from my client:
“Your account has been locked due to an excessive number of unsuccessful login attempts.” After chatting with WPEngine support, we learned that WP-Defender was acting up. The tech did a backup then disabled the plugin. He also cleared the cache in case it cached some code as well.
Just thought you guys would want to know this.