Honeypots have demonstrated immense value in Internet security, but physical honeypot deployment can be complex, time-consuming, and expensive. A solution to this problem are virtual honeypots: they share many attributes of traditional honeypots, but you can run thousands of them on a single system-making them easier and cheaper to build, deploy, and maintain. In this talk, we will introduce some recent developments in this area and focus on lessons learned with honeypots.