I've been tasked with determining whether several old URLs hitting our F5 or DNS servers is there a trick?

One way is to enable GTM query logging as Wide IP requests aren't logged by default. See Overview of BIG-IP logging BigDB database keys .

tmsh modify sys db gtm.querylogging value enable

Disable it once you're finished and perhaps only run it for a short amount of time.

Hope this helps,

N