"filename.php%bd" executes as a php file

why using PHP/5.6.37 with nginx/1.14.0 server executes the PHP file "filename.php%bd" even without using encoding in the URL (localhost/filename.php%bd)?