Here is the information I have which includes some from the sources at GitHub - gleeds/cloudbbq: A Bluetooth to MQTT bridge for the Tenergy Solis Digital Meat Thermometer and other similar devices.
[12:29:09][I][ble_client:159]: Service UUID: 0x1800
Generic Access
[12:29:09][I][ble_client:160]: start_handle: 0x1 end_handle: 0xb
[12:29:09][I][ble_client:339]: characteristic 0x2A00, handle 0x3, properties 0x2
Device Name
Value: iBBQ
[12:29:09][I][ble_client:339]: characteristic 0x2A01, handle 0x5, properties 0x2
Appearance
[12:29:09][I][ble_client:339]: characteristic 0x2A02, handle 0x7, properties 0xa
Peripheral Privacy flag
Value 0x00
[12:29:09][I][ble_client:339]: characteristic 0x2A03, handle 0x9, properties 0x8
Reconnection Address Write
[12:29:09][I][ble_client:339]: characteristic 0x2A04, handle 0xb, properties 0x2
Peripheral prefered connection parameters
Value: 0x5000A0000000E803
[12:29:09][I][ble_client:159]: Service UUID: 0x1801
Generic Attribute
[12:29:09][I][ble_client:160]: start_handle: 0xc end_handle: 0xf
[12:29:10][I][ble_client:339]: characteristic 0x2A05, handle 0xe, properties 0x20
Service Changed
[12:29:10][I][ble_client:159]: Service UUID: 0x180A
Device Information
[12:29:10][I][ble_client:160]: start_handle: 0x10 end_handle: 0x22
[12:29:10][I][ble_client:339]: characteristic 0x2A23, handle 0x12, properties 0x2
System Id
Value: 0xCD45270000DE0334
[12:29:10][I][ble_client:339]: characteristic 0x2A24, handle 0x14, properties 0x2
Model Number String
Value: iBBQ
[12:29:10][I][ble_client:339]: characteristic 0x2A25, handle 0x16, properties 0x2
Serial Number String
Value: 00-000000 (0x30302D303030303030)
[12:29:10][I][ble_client:339]: characteristic 0x2A26, handle 0x18, properties 0x2
Firmware revision string
Value: 3.10.2 (0x332E31302E32)
[12:29:10][I][ble_client:339]: characteristic 0x2A27, handle 0x1a, properties 0x2
Hardware Revision String
Value: 3.10.2 (0x332E31302E32)
[12:29:10][I][ble_client:339]: characteristic 0x2A28, handle 0x1c, properties 0x2
Software Revision String
Value: 3.10.2 (0x332E31302E32)
[12:29:10][I][ble_client:339]: characteristic 0x2A29, handle 0x1c, properties 0x2
Manufacturer string
Value: Quilin net (0x51696C696E206E6574)
[12:29:10][I][ble_client:339]: characteristic 0x2A50, handle 0x1c, properties 0x2
PNP ID
Value: (0x010D0000001001)
Custom Service: 0000FFF0-0000-1000-8000-0805F9B34FB
Custom Characteristic: 0xFFF1
UUID: 0x2902: Notifications
UUID: 0x2901: Setting Result
Custom Characteristic: 0xFFF2
Write request
UUID: 0x2901: Account & Verify Pairing
Autopair key: 33,7,6,5,4,3,2,1,-72,34,0,0,0,0,0
Handpair key: 33,7,6,5,4,3,2,1,1,1,1,1,0,0,0
Fuwei` key: 4,-1,0,0,0,0
dianya key: 8,36,0,0,0,0
Read versions key: 8,35,0,0,0,0
Custom Characteristic: 0xFFF3
UUID: 0x2902: Notifications
UUID: 0x2901: History Data
Custom Characteristic: 0xFFF4
UUID: 0x2902: Notifications
UUID: 0x2901: Real Time Data
Same as Inkbird IBT-4XS but Six 16-bit words instead of Four
Custom Characteristic: 0xFFF5
UUID: 0x2902: Notifications
UUID: 0x2901: Setting/Command Data
Set Units to F Command: 0x020100000000
Set Units to C Command: 0x020000000000
Start Temperature Updates Command: 0x0A0100000000
Set Target Temp
Byte 0: 1
Byte 1: Probe
Byte 2-3: TargetTemp low (??)
Byte 4-5: TargetTemp High (??)