It's not possible to do this as with certain ISPs that assign dynamic IPs or inside large buildings that have multiple outgoing IPs, one user can have a different IP for different requests made at the same time.
The general question - why not to bind the cookie to some other identifier of the user or user's computer to make cookie useless in thief's hands.