Firstly, even if you had portal gun enabled, it can't pick up obsidian or bedrock.
Secondly, the best way to prevent hackers is to whitelist your server, also maybe try to find the forum post he acquired the hack from, then "stalk" the posts of member who have replied until you find there ingame...