In case it is a user application container it is. It is bound directly to that ip. Sidekicks and ambassadors are not bound to that ip, because nobody should be interested in calling that instances directly. It would be up to the caller to know that fact, that only an user application container does have that specified ip.