SELECT user_name, ug1.ug_group, log_timestamp

FROM user_groups AS ug1

LEFT JOIN user ON ug1.ug_user = user_id

LEFT JOIN user_groups AS ug2 ON ug1.ug_user = ug2.ug_user AND ug2.ug_group = 'bot'

LEFT JOIN (

  SELECT log_title, log_timestamp

  FROM logging

  WHERE log_type = 'rights'

      AND log_action = 'autopromote'

      AND log_timestamp < 20211201131000

) logging ON REPLACE(log_title, "_", " ") = user_name

WHERE ug1.ug_group IN ('extendedconfirmed', 'sysop')

    AND ug2.ug_user IS NULL

GROUP BY ug1.ug_user