It's only locked if the staff are aware that the account has been hacked. They don't bother locking accounts if different IPs attempt to access it. Otherwise, any account could be locked and that wouldn't make sense.
After multiple attempts to access the account, and failures.
You get it locked for 10 min..
then if people still are trying to log in.. you get it locked forever.