Permissions for wp-content folder?

After being notified by an outside party that someone had uploaded phishing pages into my wp-content folder, I’d like to review the permissions settings for this folder.

Can someone tell me what the recommended settings should be so that I can still upload images but something like this can not happen again?