If your users are create databases in different like what ever the name they want, we cannot able to identify the user who is abusing the server.
Only by the username of the account, we can easily identify the abuser.
If this featured is disabled, We can enable the same.
Just follow the steps.
You can disabled this by changing in
/var/cpanel/cpanel.config
database_prefix=0
to
database_prefix=1
and restarting cpsrvd.
/usr/local/cpanel/etc/init/stopcpsrvd
/usr/local/cpanel/etc/init/startcpsrvd