Thats probably the best use of a virtual machine. Put it in suggestive clothing & park it outside your firewall & wait for people to break in.

This could work as a security tool.

Unfortunately, putting unpatched WinXP is out of the question..