Multiple form submissions each hour to wp-load.php

Those requests might be legit. For instance, a plugin on your website can initiate them if it utilizes some external service for executing background tasks like creating the website's sitemap. Everything depends on what you see in WP Cerber's logs and on the Live Traffic page in particular. Based on the information in the logs you can recognize the service or the plugin that initiates requests. If those requests are not legit or you can not recognize them, you can ignore them and let WP Cerber do its job or add the IP addresses they are coming from to Cerber's black list. Our recommendation is to set "Enable traffic inspection" to "Maximum security" in the Traffic Inspector settings. Additionally, it's a good practice to have enabled "Protect all forms on the website with bot detection engine" in the Anti-spam settings. Although, it might cause a conflict with a form on your website.