I would think the resident.log.

But it depends on from what shield it was blocked.