fixed #218, matching attacks as bait
http bait was not using UTC