Why Google reports DMARC appears IPv6?

Have two servers on digitalocean. Lie on each websites and email. For some reason when sending emails to gmail always goes to spam. All set: dkim, dmarc, spf. IPv6 turned off. The situation is the following: google has started to send DMARC reports and there appears string unit, namely:

<?xml version="1.0" encoding="UTF-8" ?>
<feedback>
<report_metadata>
<org_name>google.com</org_name>
<email>noreply-dmarc-support@google.com</email>
<extra_contact_info>https://support.google.com/a/answer/2466580</extra_contact_info>
<report_id>8983433048806662136</report_id>
<date_range>
<begin>1553644800</begin>
<end>1553731199</end>
</date_range>
</report_metadata>
<policy_published>
<domain>domain.com</domain>
<adkim>r</adkim>
<aspf>r</aspf>
<p>reject</p>
<sp>reject</sp>
<pct>100</pct>
</policy_published>
<record>
<row>
<source_ip>46.101.194.*</source_ip>
<count>3</count>
<policy_evaluated>
<disposition>none</disposition>
<dkim>pass</dkim>
<spf>pass</spf>
</policy_evaluated>
</row>
<identifiers>
<header_from>domain.com</header_from>
</identifiers>
<auth_results>
<dkim>
<domain>domain.com</domain>
<result>pass</result>
<selector>mail</selector>
</dkim>
<spf>
<domain>domain.com</domain>
<result>pass</result>
</spf>
</auth_results>
</record>
<record>
<row>
<source_ip>2a06:6440:0:2c13::2</source_ip>
<count>1</count>
<policy_evaluated>
<disposition>reject</disposition>
<dkim>fail</dkim>
<spf>fail</spf>
</policy_evaluated>
</row>
<identifiers>
<header_from>domain.com</header_from>
</identifiers>
<auth_results>
<spf>
<domain>h47.default-host.net</domain>
<result>none</result>
</spf>
</auth_results>
</record>
</feedback>


I'm confused about is the last block where the IPv6 address:

<record>
<row>
<source_ip>2a06:6440:0:2c13::2</source_ip>
<count>1</count>
<policy_evaluated>
<disposition>reject</disposition>
<dkim>fail</dkim>
<spf>fail</spf>
</policy_evaluated>
</row>
<identifiers>
<header_from>domain.com</header_from>
</identifiers>
<auth_results>
<spf>
<domain>h47.default-host.net</domain>
<result>none</result>
</spf>
</auth_results>
 </record>


In the exim logs, found the following lines:


2019-03-25 17:31:51 1h8RZk-0005Ha-Ie <= mmas@h47.default-host.net H=web-relay-6.default-host.net [185.104.44.49] P=esmtps X=TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256 CV=no S=6239 id=201903251531.x2PFVeET115398@h47.default-host.n$
2019-03-25 17:31:51 1h8RZk-0005Ha-Ie => anton R=localuser_spam T=local_spam_delivery
2019-03-25 17:31:51 1h8RZk-0005Ha-Ie Completed


Could this be affecting the delivery of emails from our server to the Inbox in GMAIL?
March 19th 20 at 09:01
1 answer
March 19th 20 at 09:03
If you DKIM sign emails and 2a06:6440:0:2c13::2 is not your address (this is not Digital Ocean and Hosting Ukraine Ltd.) so someone is trying this address to send fake emails from your domain.

On delivery of your mails on GMail that is this influence should not.
@Teresa.Stroman,
... or the letter was forwardedto with IP 2a06:6440:0:2c13::2, and the forwarder does not preserve the DKIM signature (are also there) - Erwin.Schoen28 commented on March 19th 20 at 09:06

Find more questions by tags VestaDigitalOceanMail serverEximGmail