GPIO0 to GPIO7 have their internal pull-ups to 3V3 enabled at power-up. Pins 3 and 5 (GPIO2 and GPIO3) additionally have external hard wired 1k8 pull-ups to 3V3.
Other GPIO have their internal pull-downs to ground enabled at power-up.
See page 102 of BCM2835 ARM Peripherals
