diff --git a/backend/src/api/bitcoin/esplora-api.ts b/backend/src/api/bitcoin/esplora-api.ts
index 0f3c6290d..af021bf2e 100644
--- a/backend/src/api/bitcoin/esplora-api.ts
+++ b/backend/src/api/bitcoin/esplora-api.ts
@@ -214,11 +214,11 @@ class ElectrsApi implements AbstractBitcoinApi {
   }
 
   async $getMempoolTransactions(txids: string[]): Promise<IEsploraApi.Transaction[]> {
-    return this.failoverRouter.$post<IEsploraApi.Transaction[]>('/mempool/txs', txids, 'json');
+    return this.failoverRouter.$post<IEsploraApi.Transaction[]>('/internal/mempool/txs', txids, 'json');
   }
 
   async $getAllMempoolTransactions(lastSeenTxid?: string): Promise<IEsploraApi.Transaction[]> {
-    return this.failoverRouter.$get<IEsploraApi.Transaction[]>('/mempool/txs' + (lastSeenTxid ? '/' + lastSeenTxid : ''));
+    return this.failoverRouter.$get<IEsploraApi.Transaction[]>('/internal/mempool/txs' + (lastSeenTxid ? '/' + lastSeenTxid : ''));
   }
 
   $getTransactionHex(txId: string): Promise<string> {
@@ -238,7 +238,7 @@ class ElectrsApi implements AbstractBitcoinApi {
   }
 
   $getTxsForBlock(hash: string): Promise<IEsploraApi.Transaction[]> {
-    return this.failoverRouter.$get<IEsploraApi.Transaction[]>('/block/' + hash + '/txs');
+    return this.failoverRouter.$get<IEsploraApi.Transaction[]>('/internal/block/' + hash + '/txs');
   }
 
   $getBlockHash(height: number): Promise<string> {
diff --git a/production/nginx/location-api.conf b/production/nginx/location-api.conf
index 2b2b85411..71afa295a 100644
--- a/production/nginx/location-api.conf
+++ b/production/nginx/location-api.conf
@@ -2,6 +2,14 @@
 # mempool #
 ###########
 
+# Block the internal APIs of esplora
+location /api/internal/ {
+	return 404;
+}
+location /api/v1/internal/ {
+	return 404;
+}
+
 # websocket has special HTTP headers
 location /api/v1/ws {
 	try_files /dev/null @mempool-api-v1-websocket;
diff --git a/production/nginx/location-liquid-api.conf b/production/nginx/location-liquid-api.conf
index e438d1cdc..6c222c469 100644
--- a/production/nginx/location-liquid-api.conf
+++ b/production/nginx/location-liquid-api.conf
@@ -2,6 +2,14 @@
 # mempool #
 ###########
 
+# Block the internal APIs of esplora
+location /liquid/api/internal/ {
+	return 404;
+}
+location /liquid/api/v1/internal/ {
+	return 404;
+}
+
 # websocket has special HTTP headers
 location /liquid/api/v1/ws {
 	rewrite ^/liquid/(.*) /$1 break;
diff --git a/production/nginx/location-liquidtestnet-api.conf b/production/nginx/location-liquidtestnet-api.conf
index 329b7e2e9..5d5be5d43 100644
--- a/production/nginx/location-liquidtestnet-api.conf
+++ b/production/nginx/location-liquidtestnet-api.conf
@@ -2,6 +2,14 @@
 # mempool #
 ###########
 
+# Block the internal APIs of esplora
+location /liquidtestnet/api/internal/ {
+	return 404;
+}
+location /liquidtestnet/api/v1/internal/ {
+	return 404;
+}
+
 # websocket has special HTTP headers
 location /liquidtestnet/api/v1/ws {
 	rewrite ^/liquidtestnet/(.*) /$1 break;
diff --git a/production/nginx/location-signet-api.conf b/production/nginx/location-signet-api.conf
index 54bdc3648..8469043a8 100644
--- a/production/nginx/location-signet-api.conf
+++ b/production/nginx/location-signet-api.conf
@@ -2,6 +2,14 @@
 # mempool #
 ###########
 
+# Block the internal APIs of esplora
+location /signet/api/internal/ {
+	return 404;
+}
+location /signet/api/v1/internal/ {
+	return 404;
+}
+
 # websocket has special HTTP headers
 location /signet/api/v1/ws {
 	rewrite ^/signet/(.*) /$1 break;
diff --git a/production/nginx/location-testnet-api.conf b/production/nginx/location-testnet-api.conf
index 656a705ff..9f0c41147 100644
--- a/production/nginx/location-testnet-api.conf
+++ b/production/nginx/location-testnet-api.conf
@@ -2,6 +2,14 @@
 # mempool #
 ###########
 
+# Block the internal APIs of esplora
+location /testnet/api/internal/ {
+	return 404;
+}
+location /testnet/api/v1/internal/ {
+	return 404;
+}
+
 # websocket has special HTTP headers
 location /testnet/api/v1/ws {
 	rewrite ^/testnet/(.*) /$1 break;