Healthmonitor with Credentials leaded to a Fail-to-Ban on Appl. site

Hi Together,

 

I have a simple Healthmonitor (GET/Receive String) with a "Check_User" which triggered a Fail to ban on Application site.

 

Somehow this Check_User used for the Healthmonitor pulled more requests than usual. The Monitor was not able to perform the Monitor and so on...

 

The Problem occured for the first time and we had no problems earlier. After releasing the "Check_User" out of his banned state - the healthmonitor works as expected.

 

Is there any way to get more information WHAT or WHO initiated the requests?

 

We are using BIG-IP 1600 with Version 11.5.3.

 

Thanks in advance.