Abstract:Build honeynet reasonably can help administrator capture the hacker behavior successfully to enhance network security. It will cost much people and material resources to deploy multiple honeypots in a distributed environment, we can use virtualization to do it. This paper use low interaction honeypot build a distributed virtualize honeynet based on Vmware, share attack log using XMPP server, and visualize the data sets with carniwwwhore.