The attacks tab says the current count is "100% Below normal". It does not support what you think it supports.
It "lights up" because there are always attacks happening.
It "lights up" because there are always attacks happening.
The red are the areas with the most attacks, and as you'd expect, they correspond to large population centers. (It's also not very granular, and appears to largely correspond to "where does Akamai have a datacenter".)