Adrian,
Yes, add $si to the list of extra Radius attributes logged in accounting, for example:
Unfortunately, as far as I can see (but I'm using a slightly outdated OpenSER version) $si contains the reported remote IP address, not the public IP address that the message has been received from.