Hi Harmut,
Can you take a wireshark capture on your DHCP server to determine where the DHCP Declines are coming from?
Use the "bootp" filter in Wireshark to see only Bootp/DHCP related traffic. When you find a Decline, look for the Client MAC addresses to see if you can trace it to a device.