It's not Kalos born, so I can't really check it for legality (because Pokécheck is not working for X/Y yet) but it's IVs are not great, all the moves are available for that Pokémon, same for Nature. He is for sure legit, there's nothing that proves that he's hacked, at least that I can see.