select

     log_title as 'blocked user',

     count(*) as times,

     group_concat(distinct

                  date_format(log_timestamp, '%Y-%m-%d %T')

                  order by log_timestamp separator ',\n')

                  as dates

from logging_logindex

where

    log_namespace = 2

    and log_type = 'block'

    and log_action in ('block', 'reblock')

group by log_title

having count(*) > 2

order by count(*) desc

limit 200;