Monero network hashrate distribution (stats on 8 february)
Roughly 70% of network hashare are on private pools.
Seems to be coinhive, js web miners, compromised pc/cpu instances botnets and Baikal, PinIdea and Bitmain ASICs/FPGAs