Command Source/Client IP

There is no such feature. There is no way for your rules to know form which client a command or update came from.

There is Design Pattern: Manual Trigger Detection which shows you how to detect whether a command came from one of your Rules versus one of your clients, but there is no way to distinguish between external clients.