Webhook API workflow getting triger without being ping

Webhook API workflow getting triger without any ping from server ? . and then its running unnecessary things,

Any one faced it

Do you have the necessary security practises in place so that no one calls your endpoint without any auth?