The Login refresh does not mean you already connected to the server.
What you see is from the Login Refactoring feature since RFA 7.0. Instead of receiving multiple login response messages per connection or service state change that provided mostly redundant information, the application will immediately get one Refresh response message with a stream state of OPEN and a data state of SUSPECT created by RFA.
When the login status has been changed later e.g. the server send a successful login response(a stream state of OPEN and a data state of OK) to RFA, RFA transforms this message as a Status message and send to the application.
From the screenshot, it looks like the server is not available or the port is not open on the server-side.
-Can you ping the server from your windows?
-And can you test the port by running telnet command to the server using 14002 port like
telnet <Server IP> 14002