Never figured it out. We cross checked the time of the lock up with activity and couldn't find anything. For now the box seems to be fine, I'm looking into how to add some hardware monitoring tools to see if I can catch something if it ever happens again, but it'll be run forever now.