XML comment triggers an attack signature

Hello,     Can anyone tell me why a comment in an XML POST is seen as an attack?     The only thing I've found so far is the use of comments to help generating the correct checks...