Looking at the traffic left on image scalers now that thumbor is handling all of upload.wikimedia.org, I see hits on thumb.php. They all seem to be for icons and the referer is always a Polish project:
http://commons.wikimedia.org/w/thumb.php?f=Gnome-mime-application-msword.svg&w=18 - image/png https://pl.wikisource.org/ http://commons.wikimedia.org/w/thumb.php?f=Broom%20icon.svg&w=22 https://pl.wikipedia.org/ http://commons.wikimedia.org/w/thumb.php?f=Edit%20remove.svg&w=15 image/png https://pl.wikipedia.org/ http://commons.wikimedia.org/w/thumb.php?f=Noia_64_apps_kmix_mod.png&w=22& - image/png https://pl.wiktionary.org/
This feels like an extension or gadget that would be on popular in the Polish community. It should be fixed to point to upload.wikimedia.org, which would give it varnish caching.
AFAIK it required special effort to point to that URL, as the wiki itself never does when it's configured to use upload.wikimedia.org. I don't think we should go out of our way to support that use case.