Which network device is designed to block network connections that are identified as potentially malicious?

Intrusion prevention system $($IPS$)$

Intrusion detection system $($IDS$)$

Web server

Router