That screenshot doesn't say anything about how the field is mapped. Use the get mapping API for that. But you pushed a new index template and created a new index that you populated with data, yes?
Regarding the geoip fields they will, again, never be populated for IP addresses in the private RFC1918 namespace (like 172.16.18.52).