Anonymise your server from scanners like Copenheimer and ServerSeeker. With options to disable logging spam logins and rate limit new connections.
Before joining, players and server scanners alike see an unconfigured Minecraft server
After the player has fully logged in, checking for whitelist and bans, they're served the real server info, including online players list