2015-04-30 16:55:43 10.*.*.10 anonymous MSFTPSVC1 NEWSTORAGE 10.*.*.11 21 [9844]USER anonymous - 331 0 0 0 0 FTP - - - -
2015-04-30 16:55:43 10.*.*.10 anonymous@anonymous.com MSFTPSVC1 NEWSTORAGE 10.*.*.11 21 [9844]PASS anonymous@anonymous.com - 230 0 0 0 0 FTP - - - -
2015-04-30 16:55:43 10.*.*.10 anonymous@anonymous.com MSFTPSVC1 NEWSTORAGE 10.*.*.11 21 [9844]CWD StoreDocs/h1/ - 250 0 0 0 0 FTP - - - -
2015-04-30 16:55:45 10.*.*.10 anonymous@anonymous.com MSFTPSVC1 NEWSTORAGE 10.**11 21 [9844]CWD .. - 250 0 0 0 0 FTP - - - -
2015-04-30 16:55:45 10.*.*.10 anonymous@anonymous.com MSFTPSVC1 NEWSTORAGE 10.**11 21 [9844]CWD .. - 250 0 0 0 0 FTP - - - -
2015-04-30 16:55:45 10.*.*.10 anonymous@anonymous.com MSFTPSVC1 NEWSTORAGE 10.**11 21 [9844]MKD StoreDocs/h1/2015-04-30 - 550 183 0 0 0 FTP - - - -
2015-04-30 16:55:45 10.*.*.10 anonymous@anonymous.com MSFTPSVC1 NEWSTORAGE 10.**11 21 [9844]QUIT - - 550 0 0 0 0 FTP - - - -
.10 being the Workcentre client and .11 being the FTP server.