User::isPingLimitable() should handle CIDR notation in $wgRateLimitsExcludedIPs. There are several IP ranges set in the Wikimedia config which apparently don't work.
Not sure what the performance implication would be, the current logic just does an in_array check.