# cat /proc/acpi/wakeup
Examples:
EHC1 S3 *enabled pci:0000:00:1d.0
EHC2 S3 *enabled pci:0000:00:1a.0
# echo "EHC1" > /proc/acpi/wakeup
# echo "EHC2" > /proc/acpi/wakeup
Create file like this one:
# nano /etc/tmpfiles.d/ehc1-disable-wake.conf
With lines:
w+ /proc/acpi/wakeup - - - - EHC1
w+ /proc/acpi/wakeup - - - - EHC2
Then reboot and check again -- specified devices will not wake up a machine until you let them again.
Here's how to do it via sytstemd:
https://unix.stackexchange.com/a/772229/143394