You are seeing this false positive because the arguments after scr.pl are not seperated with a hook (?), but instead by an ampersand (&) which is usually only used to separate arguments. Since this is a non-standard webserver I would suggest that you use the RecordOfExcludedAddress and exclude that webserver from alarm 5191.