Also, found this on another website:

<comment>
<reviewed>0</reviewed>
<name>Jonathan</name>
<email>sexy_boi_1234@hotmail.com</email>
<ip>209.226.200.181</ip>
<comment>
<![CDATA[
Hi im having a problem with this script could you please send me an email at sexy_boi_1234@hotmail.com, for some reason the "read more" area does not show the information and in the admin area the information for that area gets deleted
]]>
</comment>

Stole it from a vulnerable XML stylesheet, so it contains his IP address too. You can cross-refrence this with the member panel or whatever to see what users have signed up with this IP.