If you are getting an error message like “Connection refused”, “Connection timed out” or “Can’t resolve host name”, it is likely that there is a local firewall set up with per-application rules. The rules may allow the other clients, but not WinSCP.
You may also start getting the error after upgrading WinSCP. Some firewalls check executable file fingerprint. As the executable file changes with upgrade, the firewall starts blocking the executable, although you may have added exception rule for WinSCP already.
For built-in Windows firewall, go to Control Panel > System and Security > Windows Defender Firewall > Allow an app or feature through Windows Defender Firewall (Windows Firewall > Allow a program or feature through Windows Firewall on Windows 7). There you can add an exception for
For other reasons of getting refused to connect, please read documentation.