No, that will not work, because some people are on rapidly changing IP addresses, or they switch from their desktop to mobile or laptop.
However, is true that a password reset token is generally invalidated after first use, whereas files stick around…