It could be firewalling or it could be that ActiveMQ out of the box only listens on the localhost address and that you need to configure it to listen on something else (like 0.0.0.0 or :: for all addresses).
I changed the host name value in a jetty.xml file from 127.0.0.1 to 0.0.0.0
[root@centos8 activemq]# less /opt/local/activemq/conf/jetty.xml
<bean id="jettyPort" class="org.apache.activemq.web.WebConsolePort" init-method="start">
<!-- the default port number for the web console -->
<property name="host" value="127.0.0.1"/>
<property name="port" value="8161"/>
</bean>
to match our dev host.
[kxn2@amq-d01 ~]$ less /opt/local/activemq/conf/jetty.xml