Actually the only trace is IP address. Knowing IP address you can get the country and provider.

To get the name of the person or company, you have to contact provider and ask about it. Provider can give you that info only after law-court's approval

For the hack attack hackers use proxies, that can't be traced.

So it is absolutely idiocy to tell that Kremlin hacked Estonian sites.