Starting with the release of Mosquitto version 2.0.0 (you are running v2.0.2) the default config will only bind to localhost
as a move to a more secure default posture.
If you want to be able to access the broker from other machines you will need to explicitly edit the config files to either add a new listener
that binds to the external IP address (or 0.0.0.0) or add a bind
entry for the default listener.
By default it will also only allow anonymous connections (without username/password) from localhost, to allow anonymous from remote add:
allow_anonymous true
More details can be found in the 2.0 release notes here