Wait till he gets bored, that should stop him for awhile.
Or better yet, have the main admin try to ban ALL proxy IPs.
He isn't hacking the server you or your friend is most likely playing a pirated version of Minecraft and your friend has server with the verify-names set to false.
It's possible to hack minecraft servers, unfortunately.
If the guy can do that then he can probably DDoS the server too.