I would say the last login was when they could actually get into their account and do something there, i.e. the legitimate login. Suspended users aren't able to log in and thus their login attempt should not count.
I would say the last login was when they could actually get into their account and do something there, i.e. the legitimate login. Suspended users aren't able to log in and thus their login attempt should not count.