Suspicious user talk page moves

SQL

SELECT (SELECT COUNT(*) from logging_userindex l2 
	WHERE l2.log_timestamp >= l1.log_timestamp and l2.log_timestamp < (l1.log_timestamp+1000000) and l2.log_actor=l1.log_actor
        and l2.log_type="newusers") as creation_count, 
actor_user, actor_name, l1.log_timestamp from logging l1 join actor on log_actor=actor_id 
where l1.log_timestamp > "20190601000000" and l1.log_type="newusers" 
and not exists (select * from user_groups where ug_user=actor_user and (ug_group="sysop" || ug_group="accountcreator")
and (SELECT COUNT(*) from logging_userindex l2 
	WHERE l2.log_timestamp >= l1.log_timestamp and l2.log_timestamp < (l1.log_timestamp+1000000) and l2.log_actor=l1.log_actor
        and l2.log_type="newusers") > 4;
SQL

Checking query status...
