Into Firewall or Defense+ logs. If they detected it, they should have logged it.