Dear Clark,
What's the different between last_attempted and last_activity?
I just guess, last_attempted is for latest attempt of login, and last_activity for last successful login?
BTW, to read the time easier, I change a bit on the SQL statement,
select hex(goid), version, hex(provider_goid), login, fail_count, FROM_UNIXTIME(last_attempted/1000), FROM_UNIXTIME(last_activity/1000), state from logon_info;
Regards,
Mark