diff --git a/README.md b/README.md
index 52bfd3c..992ad85 100644
--- a/README.md
+++ b/README.md
@@ -89,6 +89,24 @@ cd ServerStatus/server && make
 			"interval": 600,
 			"callback": "https://yourSMSurl"
 		},
+		{
+                        "name": "服务器内存使用率过高监控",
+                        "rule": "(memory_used/memory_total)*100>90",
+                        "interval": 600,
+                        "callback": "https://yourSMSurl"
+                },
+                {
+                        "name": "服务器宕机告警",
+                        "rule": "online4=0&online6=0",
+                        "interval": 600,
+                        "callback": "https://yourSMSurl"
+                },
+		{
+                        "name": "DDOS和CC攻击监控",
+                        "rule": "tcp_count>1000",
+                        "interval": 300,
+                        "callback": "https://yourSMSurl"
+                },
 		{
 			"name": "你可以组合任何已知字段的表达式",
 			"rule": "(hdd_used/hdd_total)*100>95",
diff --git a/server/config.json b/server/config.json
index 2dd7e9a..e07ad52 100644
--- a/server/config.json
+++ b/server/config.json
@@ -57,6 +57,12 @@
 			"interval": 600,
 			"callback": "https://yourSMSurl"
 		},
+		{
+                        "name": "ddcc attack",
+                        "rule": "tcp_count>1000",
+                        "interval": 300,
+                        "callback": "https://yourSMSurl"
+                },
 		{
 			"name": "you can parse an expression combining any known field",
 			"rule": "load_5>3",