Hi, @Profamx
It's PHP's Built-in web server feature.
Please check the following URL.
https://www.php.net/manual/en/features.commandline.webserver.php
If 0.0.0.0 is specified, it can be accessed from any remote server. This is a PHP built-in web server specification, not an Azure issue.
The PHP documentation also notes the following:
You should not use it on public networks.
Warning
The built-in Web Server should not be used on a public network.
From here, I will talk about what you can do with Azure.
If you want to keep your Azure virtual network private, don't give it a public IP address.
https://learn.microsoft.com/en-us/azure/virtual-network/ip-services/public-ip-addresses
If you publish your PHP application on a public network, we recommend hosting it with Apache or Nginx and controlling the communication with a virtual network or firewall.
https://learn.microsoft.com/en-us/azure/virtual-machines/linux/tutorial-lamp-stack
You can also host your PHP application on Azure App Service.
https://learn.microsoft.com/en-us/azure/app-service/