custom validation rule for IP in form

Of course you can.

You can add it as a hidden input field in your form and do your validation.

Code:

<input type="hidden" name="user_ip" value="<?php echo $request->getIPAddress(); ?>">

obviously that wont work as users will be able to edit it before posting the form