From my other comment it looks like this dataset contains various strings that trigger refusal: https://huggingface.co/datasets/mlabonne/harmful_behaviors

Also, you might want to research this Heretic project, which aims to remove safeguards from local models as those might be similar to what’s in the larger versions. Figuring out the phrases they test the safeguards with might have some decent results.

Asking questions about Chinese politics and/or Tiananmen Square  stops most China based AI models, like Qwen and whatever is on Huawei phones. They aren’t that high traffic yet, but are certainly in the list of “all ai models”