Determine source IP addresses of SSLv3 connections?

not sure if there are any stats on this you can query, but here is an irule that will log the connections to /var/log/ltm

when CLIENTSSL_HANDSHAKE {
    if { [SSL::cipher version] eq "SSLv3" } {
        log local0.debug "[IP::client_addr] accessed [virtual name] with SSLv3"
    }
}

This assumes you have a client_ssl profile on the virtual server. If not, you would have to modify the script at https://devcentral.f5.com/articles/irule-to-stop-sslv3-connections to just log instead of reject.