I would suggest using nmap.
Something along the lines of
Code:
nmap -p 3306 --open -sV 10.0.0.0/24 > mysqlservers
Where 10.0.0.0/24 would be replaced with the subnet you wish to scan.
This will scan all hosts on the specified subnet look for the mysql port to be open..
This is not going to be 100%, firewalls and such could break it easily...
Some other ideas to get you started.
Using ssh to remotely execute ps and/or netstat -tnlp to look for the mysql process or if mysql is listenning on port 3306.
If the traffic to/from the mysql servers is being routed, you could use tcpdump to sniff out the ip addresses sending packets on 3306.
I really have to say that I am astounded that you are in this situation, your network should be documented so you (and anybody else) always know what is where.
