The Geo Visualization widget has multiple filtering options to filter the alerts data:
Attack: Filter alerts by a specific attack type. The default selection is All
The following options are available: Malware Object, Malware Callback, Domain Match, Infection Match, Riskware Infection Match, Web Infection, Riskware Alerts, IPS Alerts, and SmartVision.
Country: Filter alerts by country. You can select one or more countries.
IP/Mask: Filter alerts by capability to look for a specific attacker's or victim's IP and subnet addresses.