iTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more
Antihost offers Linux VPS plans with full root access, unlimited traffic on a 1 Gbps port and a 14-day free trial.
ECONNREFUSED in FileZilla means the TCP connection was rejected before authentication or file transfer began. The usual causes are a wrong host, port or protocol; an FTP/SFTP service that is not listening; a firewall blocking the connection; a passive-mode data port that cannot be reached; a connection limit; or a hostname or network that is incorrect or restricted.
Work through the checks below in order. Start with the address and protocol in Site Manager, then verify the server, firewall, transfer mode and host-side limits. Do not leave antivirus or firewall protection disabled: use a temporary test only to identify the cause, then create a narrow FileZilla exception.
What ECONNREFUSED means in FileZilla
ECONNREFUSED is a TCP-level error. FileZilla tried to open a connection to a specific address and port, but no service accepted it there, or a firewall or network device actively rejected it. The failure occurs before FileZilla can verify your username and password, list directories or transfer a file.
That distinction determines the fix. Re-entering credentials will not repair a port that is closed, and changing transfer settings will not help if the hostname points to the wrong server. First identify which connection failed: the initial control connection or the separate data connection used for directory listings and transfers.
#1 Best Overall
- 40 Gbps 2000 Mhz High Speed: The Cat 8 ethernet cable support max. 40 Gbps data transfer and 2000 MHz Brandwith, ideal for gaming and streaming, greatly improving upload and download speed, sound, image and resolution quality
- Excellent Anti-interference: The ethernet cable comes with 4 shielded foiled twisted pairs (F/FTP), pure copper core and gold-plated RJ45 connector, reducing interference, noise and crosstalk, making network speed faster and more stable
- Marvelous Durability: Internet cable wrapped with quality cotton braided cord, which makes the LAN cable stronger and more durable. The test proves that this internet cable can be bent at least 10000 times without broken, very suitable for long-term use
- PoE Supported: All lengths of ethernet cord can support the PoE power supply function except 65ft. You don't need additional power supply when installing a PoE camera, which is very convenient and safe
- Wide Compatibility: With the RJ45 Connector, network cable can be perfectly compatible with computers, laptops, modems, routers, PS5, X-Box and other networking devices. It can also be fully backward compatible with Cat7, Cat6e, Cat6, Cat5e, Cat5
Quick diagnosis
| What you observe | Most likely area | First action |
|---|---|---|
| Refusal appears immediately after Connect | Host, port, protocol, server listener or firewall | Check Site Manager against the host’s connection instructions. |
| Login succeeds, but a directory listing or upload is refused | Passive/active data connection, NAT or a data-port firewall rule | Try passive mode and verify the server’s passive port range. |
| Only one computer or network fails | Local security software or a restricted network | Test from the normal private network and inspect local firewall rules. |
| Several clients fail or repeated attempts stop working | Server service outage or connection limit | Close other clients, wait, and ask the host to confirm service status and limits. |
| FTP works but SFTP does not, or the reverse | Protocol and port mismatch | Select the matching protocol instead of changing only the port. |
1. Verify the host, port and protocol
Open FileZilla > Site Manager and compare every connection field with the host’s documentation. A standard FTP endpoint normally listens on port 21. SFTP normally listens on port 22, but SFTP is a different protocol: selecting port 22 while leaving the protocol set to FTP will still fail. Some providers use a custom port, so use the documented value rather than assuming a standard one.
| Service | Typical port | FileZilla setting | Important qualification |
|---|---|---|---|
| FTP | 21 | Choose FTP and the encryption mode required by the host. | A host may require an encrypted FTP variant or a custom port. |
| SFTP | 22 | Choose SFTP (SSH File Transfer Protocol). | Changing the port to 22 is not enough; the protocol must also be SFTP. |
Check the hostname exactly
Use the server name supplied for FTP or SFTP, not automatically the website address. A missing subdomain such as an ftp. prefix, a typo, an old server name or an extra space can send FileZilla to an address where no service is listening. If the host provides both a domain name and an IP address, test the documented alternative only as a diagnostic; keep the supported hostname for normal use.
Do these 3 things before closing this tab:
1Clear out junk files and repair common Windows errors2Fix the driver behind crashes, sound loss and screen glitches3Repair Windows errors before they cause bigger problemsConfirm the Site Manager entry is actually being used
When connecting, select the intended saved site rather than relying on a previously opened tab or a manually typed quick-connect entry. Recheck the protocol after changing the port. Save the corrected entry, reconnect, and read the first error line in the FileZilla message log so you know whether the refusal occurs on the control or data connection.
2. Confirm that the server is listening
A refusal can mean that no FTP or SFTP service is running at the destination, that the service is bound to a different interface, or that the site or account does not exist on that server. If you administer the server, check the FTP/SFTP daemon or hosting control panel and verify that it is running and configured for the address and port you entered.
For a self-managed server
- Verify that the FTP or SFTP service is started and enabled after reboot.
- Confirm that it is listening on the external interface, not only on
localhost. - Check the server’s own firewall for the control port and, when applicable, the passive data range.
- Confirm that the account, virtual host or site definition still exists and is permitted to use the service.
If you do not control the server, provide the host with the exact timestamp, hostname, port, protocol and FileZilla log line. Ask whether the service is operational and whether your account is enabled; those checks are server-side and cannot be fixed in FileZilla.
3. Check local firewall and antivirus rules
Desktop firewalls, endpoint security suites and antivirus network filters can block FileZilla’s outgoing control or data connections. A useful diagnostic is to pause the relevant protection briefly and retry on a trusted network. If the connection works only while protection is paused, turn protection back on immediately and add an allow rule for the installed FileZilla application and the required network profile.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
Rank #2
- Cat 6 performance at a Cat5e price but with higher bandwidth
- High Performance Cat6, 30 AWG, RJ45 Ethernet Patch Cable provides universal connectivity for LAN network components such as PCs,computer servers,printers,routers,switch boxes,network media players,NAS,VoIP phones
- Jadaol cat6 standard cable support Cat8 and Cat7 network and provides performance of up to 250 MHz 10Gbps and is suitable for 10BASE-T, 100BASE-TX (Fast Ethernet), 1000BASE-T/1000BASE-TX (Gigabit Ethernet) and 10GBASE-T (10-Gigabit Ethernet)
- UTP(Unshielded Twisted Pair) patch cable with RJ45 gold-plated Connectors and are made of 100% bare copper wire, ensure minimal noise and interference
- The unique flat cable shape allows for a cleaner and safer installation. You can easily and seamlessly make the cable run along walls, follow edges & corners or even make it completely invisible by sliding it under a carpet.
- Allow FileZilla on the private network profile you actually use.
- Do not create a rule that permits every inbound port unless the server administrator specifically requires it.
- Check whether security software has a separate web, application-control or encrypted-traffic module that is blocking the connection.
- Remember that a server-side firewall can produce the same symptom; a local exception cannot open a port that the server blocks.
After changing a rule, fully close and reopen FileZilla, then test once. Repeated rapid retries can also trigger connection limits or security controls.
4. Test passive and active FTP modes
FTP uses a control connection plus a second data connection for directory listings, downloads and uploads. That second connection is why a login can appear successful while a listing fails with ECONNREFUSED.
Passive mode asks the server for a data port and is usually the better choice when the client is behind a home router, carrier NAT or a restrictive firewall. Active mode asks the server to connect back to the client, which often fails when the client is not directly reachable from the internet.
Change the mode in FileZilla
- Open Edit > Settings.
- Open Connection > FTP and locate the transfer-mode controls. The exact wording can vary by FileZilla version.
- Select passive mode, apply the change, reconnect and request a directory listing.
- If passive mode fails, record the log line and test active mode only when the network and server are configured to support the callback.
Do not treat a mode change as a cure for a wrong control port. It affects the data connection after the initial FTP connection has been established.
Quick wins for a faster PC:
Repair Windows errors before they cause bigger problemsFix Now →Scan for outdated or missing drivers - takes under a minuteDriver Scan →Server and NAT requirements for passive mode
The FileZilla Network Configuration guidance says a passive client must be allowed to make outgoing connections to the server’s passive ports. On a server behind NAT, configure a defined passive range and forward that range from the router to the FTP server. The wiki recommends a range beginning at 50,000 or higher, with about 50 ports in many installations; the exact range must match the server configuration and firewall rules. See FileZilla’s Network Configuration documentation for the model configuration and diagrams.
For a NAT server, advertise the router’s public IP address to passive clients, not the server’s private address. A private address can work inside the LAN while causing outside clients to attempt an unreachable data connection. Because the current FileZilla dialog labels are not documented consistently across versions, use the terminology shown by your installed build and verify the resulting log entry.
Rank #3
- Designed for Outdoor & Direct Burial Installations – Heavy-duty double-shielded Cat8 Ethernet cable minimizes EMI/RFI interference and delivers stable long-distance performance. Waterproof, anti-corrosion PVC jacket allows safe direct burial and reliable use in outdoor or indoor environments.
- 26AWG for Stable High-Load Networks – Thicker 26AWG conductors provide faster, more stable data transmission than standard 32AWG cables. Ideal for high-performance home networks, gaming setups, smart homes, and data-intensive applications.
- F/FTP Shielding & Hyper-Speed Performance: Cat8 Ethernet cable constructed with 4 shielded foiled twisted pairs and 26AWG OFC conductors; supports bandwidth up to 2000 MHz and data transmission speeds up to 40 Gbps, effectively reducing signal interference and ensuring stable connections. Ideal for low-latency gaming, 4K/8K streaming, and high-speed internet connections.
- RJ45 Connectors & Wide Compatibility: Cat8 Ethernet cable with two shielded RJ45 connectors; compatible with networking switches, IP cameras, routers, Nintendo Switch, modems, PS3, PS4, Xbox, patch panels, servers, smart TVs, and more; works with Cat7, Cat6, Cat5e, and Cat5 devices
- Weatherproof & UV Resistant: Outdoor-rated Cat8 Ethernet cable with UV-resistant PVC jacket; withstands direct sunlight, extreme cold, humidity, and hot weather; anti-aging and durable; Includes 18-month support.
5. Use the Network Configuration Wizard with the right expectation
FileZilla’s Network Configuration Wizard is useful for checking and configuring active-mode connectivity. Community guidance indicates that it tests active mode only. A wizard failure therefore does not prove that passive mode is broken, and a successful wizard test does not validate every passive port or NAT rule.
Run the wizard when you specifically need active mode, note which test fails, and then test passive mode separately. For a passive-mode problem, concentrate on the server’s advertised address, passive range, router forwarding and both sides’ firewall rules instead of repeatedly rerunning the wizard.
6. Check connection limits and stale sessions
Some hosting environments limit simultaneous FTP connections per account or source address. When the limit is reached, new attempts may be refused until existing sessions close. This is especially plausible after a client crash, a queue that opened many connections, or several computers sharing one account.
- Stop the FileZilla transfer queue and close every other FTP client using the account.
- Wait for abandoned sessions to expire, then reconnect once.
- Reduce simultaneous transfers in FileZilla if the host documents a per-account limit.
- If refusals continue, ask the host to check active sessions, account limits and service logs.
A connection limit is a server policy, not a reason to disable your firewall or repeatedly change credentials.
7. Eliminate hostname and network problems
Test the exact hostname supplied by the host and compare it with the address shown in the error log. A common mistake is using the main website hostname when the FTP service is published under a separate name. Correcting a missing prefix or outdated DNS name can restore the connection without any FileZilla setting change.
Also test from the network normally authorized for the account. Guest wireless networks, workplace networks and public hotspots may block FTP ports or isolate devices. If FileZilla works on a private network but not on guest Wi-Fi, the network policy is the differentiator. Use an approved network or ask its administrator to permit the required destination and port; do not attempt to bypass a managed network’s controls.
The Tool Desk
Outbyte PC Repair FREEClear out junk files and repair common Windows errorsFree Scan →Outbyte Driver Updater FREEScan for outdated or missing drivers - takes under a minuteDriver Scan →Rank #4
- Cat 8 Speed, Cat 5/5e Value Enjoy Cat 8 Ethernet cable performance at a Cat 5/5e-level value. With up to 40Gbps speed and 2000MHz bandwidth, this high speed internet cable delivers more bandwidth than standard Cat 5 and Cat 5e cables, helping support smooth gaming, streaming, video calls, large file transfers and everyday wired network use.
- 40Gbps Speed, Wide Compatibility This Cat 8 Ethernet cable supports up to 40Gbps data transfer and 2000MHz bandwidth for fast, reliable internet performance. Standard RJ45 connectors are backward compatible with Cat7, Cat6, Cat6a and Cat5e devices, including routers, modems, switches, gaming PCs, PS5, PS4, Xbox, smart TVs, laptops and printers.
- Stable U/FTP Shielding Each of the 4 twisted pairs is individually wrapped with aluminum foil to help reduce crosstalk, noise, and signal interference. Combined with RJ45 connectors on both ends, the U/FTP design helps maintain cleaner signal transmission for a stable and reliable wired network connection.
- Nylon Braided Durability The nylon braided jacket adds everyday durability while keeping the cable flexible and easy to route. Reinforced construction helps the cord handle bending, pulling and frequent plugging, making it a reliable choice for desks, gaming rooms, home offices and long-term network setups.
- 50ft Reach for More Setups The 50 ft length makes it easier to connect devices across rooms, along walls, under desks or around corners. Great for router-to-PC connections, modem-to-TV setups, gaming consoles, workstations, printers and other home network equipment that needs a longer Ethernet cable.
Read the FileZilla log to locate the failed connection
Keep the message log visible while testing and note the last successful event. A refusal immediately after FileZilla resolves a hostname usually points to the control connection, so focus on the host, port, protocol, listener and firewall. If the log shows a successful login followed by a refusal while retrieving a directory, the control channel is working and the data channel is the likely failure.
- Record the resolved hostname or address, destination port and selected protocol.
- Note whether the failure occurs on connect, login, directory listing, upload or download.
- Copy the first refusal line rather than only the final “disconnected” message.
- Include the local network type and whether another client or computer succeeds.
This information prevents a host administrator from investigating the wrong service and prevents you from changing credentials when the problem is a blocked data port.
Compare the fixes by scope, effort and risk
| Check or change | Typical scope | Effort and risk | When it is most useful |
|---|---|---|---|
| Correct host, port or protocol | Client-side | Low effort and low risk | The refusal is immediate or FTP and SFTP behave differently. |
| Confirm the service listener | Server-side | Requires administrator access; no client security risk | Several users or clients fail at once. |
| Add a firewall exception | Client or server-side | Moderate effort; safer than leaving protection disabled | A brief security-software test changes the result. |
| Switch to passive FTP | Client-side first, often server-side too | Low client risk; NAT and port-forwarding work may be required | Login works but listings or transfers fail. |
| Temporarily pause antivirus or firewall | Client-side diagnostic | Higher security risk; restore immediately | Only to prove that security software is the blocker. |
| Close sessions or wait for limits | Server policy | Low risk, but resolution depends on timeout rules | Repeated attempts stop working or many connections are open. |
Changing a documented port is normally safer than disabling security software. Make one change at a time and reconnect so the result remains interpretable.
Common pitfalls that waste time
- Changing only the port: port 22 requires SFTP selected in Site Manager; it is not FTP on a different number.
- Blaming credentials: ECONNREFUSED happens before authentication, so password resets do not address it.
- Assuming a successful login proves FTP is healthy: the separate data connection can still be blocked.
- Relying on the wizard for passive mode: the Network Configuration Wizard checks active-mode connectivity according to community guidance.
- Leaving protection off: use a short test, then create a narrow application rule and restore antivirus or firewall protection.
- Using the private NAT address: outside passive clients need the router’s public address advertised by the server.
- Retrying rapidly: repeated attempts can worsen a simultaneous-connection limit or trigger security controls.
What to send the host or network administrator
A precise report usually resolves server-side cases faster than a screenshot alone. Include the date and time with time zone, the hostname, destination port, protocol, network used, whether the failure is on connect or during a listing, and the first relevant FileZilla log lines. State whether another computer, network or FTP client can connect. Ask the host to verify that the service is listening, the account or site exists, the control and passive ports are allowed, and no connection limit or outage is affecting the account.
PC Slower Than It Used to Be?
A free scan shows the junk files, broken settings and background clutter dragging Windows down - then fixes them in one click.Free scan · Windows 10 & 11Crashes, No Sound, or Screen Glitches?
Random freezes, missing sound and display glitches usually trace back to one bad driver. Find and replace yours safely.Free scan · under a minuteA complete troubleshooting sequence
- Write down the hostname, port, protocol and the exact point at which the log reports ECONNREFUSED.
- Correct the Site Manager entry: FTP normally uses 21; SFTP normally uses 22 with SFTP selected; use the host’s custom port when specified.
- Confirm that the server, site or account exists and that its FTP/SFTP service is listening.
- Check local firewall and antivirus logs. Perform only a brief disable-and-test, then restore protection and add a FileZilla exception if confirmed.
- If the failure occurs during a listing or transfer, select passive FTP and investigate the server’s passive range, NAT address and firewall forwarding.
- Use the Network Configuration Wizard only for active-mode testing.
- Close other sessions, wait for stale connections to expire and verify host-side limits.
- Retry from the authorized network and verify the hostname, then send the complete details to the host if the refusal remains.
Preventing a repeat failure
- Keep a documented Site Manager entry for each service, including its protocol and custom port.
- Record whether the server uses passive mode and which passive range is allowed through its firewall.
- Limit concurrent transfers to the host’s documented allowance.
- Keep FileZilla and endpoint security software updated, and review application rules after major upgrades.
- When reporting a persistent refusal, include the date and time, network used, hostname, port, protocol and the first relevant log lines.
There is no published statistic establishing how frequently ECONNREFUSED occurs in FileZilla, so the practical approach is evidence-based isolation: identify the failed connection, verify the listener and port, then address the firewall, transfer mode, limits or network that matches the symptom.
Frequently Asked Questions
Does ECONNREFUSED mean my FileZilla password is wrong?
Usually no. ECONNREFUSED is reported at the TCP connection stage, before FileZilla can authenticate. Check the hostname, port, protocol, listener and firewall first. Authentication errors normally appear as a separate server response after a connection is accepted.
Best Value
- [Flat Design, Zero Cable Clutter] - Lies perfectly flat against walls, under rugs, along baseboards, and through tight spaces without kinks, tangles, or messy coils. Customers praise it for effortless installation and clean cable management that blends into any room.
- [REINFORCED BRAIDED CONSTRUCTION FOR LONG‑LASTING PERFORMANCE] - Premium cotton braided jacket paired with reinforced RJ45 connectors delivers outstanding durability, rigorously tested for over 15,000 bend cycles. Many customers describe this ethernet cable as rock‑solid and well‑crafted, ideal for long‑term daily use with no worries about premature wear‑and‑tear or connection failure
- [10GBPS SPEED & 600MHZ BANDWIDTH — GAMING, STREAMING & FIBER READY] - Delivers 10Gbps data transfer rate with 600MHz bandwidth for PS5, Xbox, 4K streaming, and fiber internet. Customers report stable performance and fast speeds. Backward compatible with Cat 6 and Cat 5e devices
- [STP SHIELDING & GOLD-PLATED RJ45 — MINIMIZES EMI/RFI INTERFERENCE] - 100% bare copper STP shielding helps protect signal integrity when routed near power cords. Gold-plated RJ45 connectors resist corrosion. Compatible with 2.5GB network card
- [Works with Everything — Router, Modem, PS5, Xbox, PC, Smart TV, Printer More ] - Full backward compatibility with Cat7, Cat6, Cat6a, and Cat5e devices means this one cable works with all your home or office equipment today, and future upgrades tomorrow. Works with 10/100/1000/10G/40G BASE-T speeds. Includes 36-month warranty with free replacement support
Why does FileZilla connect but fail when listing a directory?
FTP uses a second data connection for listings and transfers. The control connection can succeed while a passive data port is blocked by a firewall, NAT rule or incorrect advertised address. Select passive mode and verify the server’s defined passive range and forwarding.
Is port 22 always the right fix?
No. Port 22 is typical for SFTP, but you must select SFTP (SSH File Transfer Protocol) in Site Manager. FTP on port 21 and a host’s documented custom port require the corresponding FTP configuration.
Should I disable my antivirus or firewall permanently?
No. A brief pause can identify whether security software is responsible, but protection should be restored immediately. Create a narrow allow rule for FileZilla on the network profile you use, and remember that a server-side firewall may still block the connection.
What does the Network Configuration Wizard actually test?
Community guidance indicates that it configures and tests active-mode connectivity. A failed wizard test does not prove passive mode will fail, and a successful test does not validate passive ports or NAT settings.
How can connection limits cause a refusal?
Some servers cap simultaneous FTP connections per account or source address. A crashed client, a busy queue or several computers can leave sessions open. Close other clients, stop the queue, wait for stale sessions to expire and ask the host to check limits if the refusal continues.
What details should I give support?
Provide the timestamp, hostname, port, protocol, network used, operation that failed and the first relevant FileZilla log lines. Also say whether another network or client succeeds. Support can then check the listener, account, firewall, passive range and active-session limits.
The Bottom Line
Fix ECONNREFUSED by matching the host, port and protocol first, then confirm the server listener. If login works but listings or transfers fail, investigate passive mode, NAT and the passive port range. Check local and server firewalls without leaving protection disabled, account for connection limits and verify the hostname and network. When the refusal persists, send the complete log context to the server or network administrator.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
