They probably left telnet open as that is how you and they gain access to your
box (not your computer) to configure it.  At least it is for the Cisco 675 that
I have sitting on my desk.