Protect calls to GeoIP calls with our mutex

Tracing through the call stack we have a few calls that end up calling _GeoIP_seek_record deep in the callstack which clobbers our global netmask.  So, even though we don't query for the netmask, to prevent some other goroutine from getting the wrong answer we need to protect these calls too.