SELECT actor_name, COUNT(log_id) AS created

 FROM logging_logindex

 JOIN actor_logging ON actor_id = log_actor

 WHERE log_type = 'newusers'

   AND log_timestamp > DATE_SUB(NOW(), INTERVAL 1 DAY)

   AND NOT EXISTS (

     SELECT 1 FROM user_groups

     WHERE actor_user = ug_user

       AND ug_group IN ('sysop', 'accountcreator', 'eventcoordinator')

   )

 GROUP BY actor_name

 HAVING created > 1

 ORDER BY created DESC