You need to set up Ringba IVR to block all calls which are not valid, get the main spammers' IP addresses and block them. Also, set up a firewall on your website and set up a number pool.
As far as a firewall goes, you can easily set Cloudflare to block anyone coming to your site that's not in the USA, plus monitor the IP addresses and block the obvious spam ones.