Hostname or IP, e.g. example.com
Attempts a direct TCP connection from our server — many hosts and firewalls silently drop or rate-limit unsolicited connections, so a "closed" or "timeout" result isn't a guarantee the port is actually unreachable. This is a best-effort check, not a full port scan.