Note: nodes are extracted from this url: onionoo.torproject.org
As per the description, "Onionoo is a web-based protocol to learn about currently running Tor relays and bridges."
These CSV files contain the following information for each node:
fingerprint,ipaddr,port,stix_pattern
(and then label_name,label_color,marking_type,marking_value,marking_priority for the CSV mapper)
To use it in OpenCTI, create the following CSV mapper (IPV4 example):

