Poll: Do you check for brute force attempts?

Web applications that properly deal with brute force attempts on user accounts are rarer than they should be. What mechanism do you use for guarding against this type of attack?