How can I identify whether the remote server is vulnerable to TLS POODLE vulnerability? Although, there are online scanners such as Qualys SSL Labs. As per my understanding, these online scanners do not work on custom ports such as 8086, 8909 etc. Also, these scanners cannot be used when we are performing the security assessment on internal network devices.
Poodle attack works on SSLv3 although there is a variant of poodle attack on TLS that appeared in recent years by accepting incorrect padding after decryption.
nmap is checking the TLS/SSL version. You can find the script of poodle identification rules online.
It is recommended to completely disable SSLv3 on server side. On the client side, you should always upgrade to the latest version. Also, most of the browsers/servers use "TLS Fallback Signaling Cipher Suite Value (SCSV) for Preventing Protocol Downgrade Attacks" to prevent any intentional downgrade of version and drop the connection.
You can use nmap:
nmap -sV --version-light --script ssl-poodle -p 8086 example.org