It's not "IPs of known VPNs" so much as "IPs and IP blocks they've seen suspicious/abusive traffic from". It's really common for people to use a VPN for their spamming/DDoS, so if your VPN provider isn't good at weeding them out, their addresses get a terrible reputation.