When i see Log On activity from another country.

When i see a Log On activity, has the account been compromised or is this logging failed attempts? It seems a lot of my students are logging in from China?   Please help me understand.