Possible intrusion?

Yes.

is there any way to verify what IP address created what file?

IP addresses don't create files.

I found this in /tmp/udp.pl can anyone shed some light on this?

It sends a deluge of UDP packets to a specified address and port.