If you go to tmsh and type "show sys connection" you can see all current connections on F5. It will show you 4 columns. The first column is the ip of the client, the second column is the VS that the client is reaching, the third column is the selfip that F5 is using to send the traffic to the pool member and the fourth column is the IP of the pool member...
Be careful with this command, if F5 is receiving lots of connections it will show you several lines and it can load the CPU... I suggest you use grep to filter you search.
If the answer is suitable for you, please, mark it as answer.