Although you only gave the IP to your friends so they can play, anyone can join the server if they know what your server name is. They could also just click "Join a random server" and randomly join yours. What I recommend is whitelisting your server, if you don't already know how to do that I'll link a youtube tutorial below. From my knowledge this is not a naturally generated structure, however I could be wrong. doubtful though